vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [External Dependencies]: The skill documentation references several standard Node.js packages such as
swr,better-all,lru-cache, andzod. These are common utilities used in React development for data fetching, caching, and validation. TheREADME.mdalso outlines standard project initialization usingpnpm install. - [File System and Storage Access]: Several rules provide guidance on using local storage and file system APIs for performance. For example,
rules/server-hoist-static-io.mddemonstrates how to use the Node.jsfsmodule to hoist static asset loading to the module level to avoid repeated I/O. Similarly,rules/client-localstorage-schema.mdprovides best practices for versioning and minimizing data stored inlocalStorageto ensure client-side efficiency and stability. - [Network and Data Fetching Patterns]: The skill emphasizes eliminating network waterfalls through concurrent data fetching using
Promise.all()and component composition. It also discusses minimizing data serialization at React Server Component boundaries to reduce payload sizes sent over the network. - [Security Practices in Examples]: The skill includes a dedicated section on securing Server Actions (
rules/server-auth-actions.md). It explicitly advises developers to treat server-side functions as public endpoints and implement internal authentication and authorization checks, which is a positive security pattern for modern web applications. - [Documentation Generation]: The skill includes build scripts (e.g.,
pnpm build) to compile individual rule files into a singleAGENTS.mdfile. This is a standard documentation management process for maintaining large sets of guidelines.
Audit Metadata