react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several third-party packages and repositories for performance optimization, including
better-allfor parallelization,lru-cachefor server-side caching, andswrfor data fetching. These resources originate from well-known maintainers and organizations within the React ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because it is designed to ingest and analyze user-provided source code.
- Ingestion points: React components and Next.js page source code files processed during refactoring or code generation tasks.
- Boundary markers: None identified in the provided instructions.
- Capability inventory: The skill provides instructions for code generation and refactoring only; it does not invoke tool-based capabilities such as network requests, file system writes, or subprocess execution.
- Sanitization: No specific sanitization or filtering logic is included for the data being analyzed.
Audit Metadata