vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- Performance and Security Guidelines: The skill provides a detailed set of 70 rules across 8 categories (e.g., Eliminating Waterfalls, Bundle Optimization). These are purely informational instructions for the agent to follow when interacting with React codebases.
- Server Action Security: The skill includes a specific rule ('server-auth-actions') that correctly advises developers to treat React Server Actions as public endpoints and perform authentication/authorization checks inside them, which is a critical security best practice for Next.js applications.
- Data Leak Prevention: The rule 'server-no-shared-module-state' instructs against using shared module scope for request-specific data, which helps prevent cross-request data contamination and potential security leaks.
- Trusted External References: All external links provided in the skill point to well-known and trusted developer resources, including official documentation (react.dev, nextjs.org, mdn), Vercel's blog, and established open-source repositories (better-all, node-lru-cache).
- No Executable Risk: The skill does not define any automated tool calls, shell commands, or network-enabled actions. It functions as a static knowledge base for prompt augmentation.
Audit Metadata