react-best-practices

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is a collection of architectural guidelines and React best practices. No malicious code patterns, obfuscation, or unauthorized data access were detected.- [EXTERNAL_DOWNLOADS]: The skill references documentation and examples for well-known services and libraries, including React, TanStack Query, and Vercel. These are official resources from trusted organizations.- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use standard search tools like grep to look up specific rules within the skill's reference files. This is a benign operational instruction for internal information retrieval.- [INDIRECT_PROMPT_INJECTION]: The skill has a standard attack surface for indirect prompt injection as it is designed to process and review user-provided React code.
  • Ingestion points: User-supplied code samples and React components.
  • Boundary markers: None explicitly defined in the instructions to separate user code from rule analysis.
  • Capability inventory: The agent can read files, execute grep searches, and generate code responses.
  • Sanitization: No specific sanitization logic is implemented.
  • Assessment: Given the educational and guideline-based nature of the skill, this surface represents standard operational behavior and does not pose a specific security threat.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 07:05 PM