vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- React Performance Guidelines: The skill provides a structured set of guidelines for performance improvements, including eliminating waterfalls and bundle size optimization.
- Security Integration: Several rules specifically address security concerns, such as authenticating Server Actions and avoiding shared module state on the server to prevent data leaks.
- Trusted Resources: External references and library recommendations point to official documentation and reputable repositories from trusted organizations.
- Indirect Prompt Injection Surface: As the skill processes user-provided React code for refactoring (ingestion point in SKILL.md), it presents a surface for indirect prompt injection. While no specific sanitization or boundary markers are defined within the skill, this is a standard risk factor for code-processing agents and does not indicate malicious intent.
- Verified Infrastructure: The skill author and all referenced tools are associated with recognized engineering organizations, and the code examples follow established industry best practices.
Audit Metadata