react-ban-use-effect
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external React source code, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: React source code files accessed during the 'Search' phase in SKILL.md.
- Boundary markers: The instructions lack definitions for delimiters or warnings to ignore instructions embedded within comments, strings, or metadata in the ingested code.
- Capability inventory: The workflow in SKILL.md authorizes the execution of shell commands for linting, type-checking, and testing (e.g., eslint, tsc, vitest).
- Sanitization: There are no documented procedures for validating or sanitizing the ingested source code before it is processed or used by development tools.
- [EXTERNAL_DOWNLOADS]: The file references/upstream.md contains a reference to an external GitHub repository (github.com/tylergibbs1/useeffectban) for the purpose of attribution and documentation.
Audit Metadata