react-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a collection of architectural guidelines and React best practices. No malicious code patterns, obfuscation, or unauthorized data access were detected.- [EXTERNAL_DOWNLOADS]: The skill references documentation and examples for well-known services and libraries, including React, TanStack Query, and Vercel. These are official resources from trusted organizations.- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use standard search tools like
grepto look up specific rules within the skill's reference files. This is a benign operational instruction for internal information retrieval.- [INDIRECT_PROMPT_INJECTION]: The skill has a standard attack surface for indirect prompt injection as it is designed to process and review user-provided React code. - Ingestion points: User-supplied code samples and React components.
- Boundary markers: None explicitly defined in the instructions to separate user code from rule analysis.
- Capability inventory: The agent can read files, execute grep searches, and generate code responses.
- Sanitization: No specific sanitization logic is implemented.
- Assessment: Given the educational and guideline-based nature of the skill, this surface represents standard operational behavior and does not pose a specific security threat.
Audit Metadata