vercel-react-best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [External Dependencies]: The skill documentation references several standard Node.js packages such as swr, better-all, lru-cache, and zod. These are common utilities used in React development for data fetching, caching, and validation. The README.md also outlines standard project initialization using pnpm install.
  • [File System and Storage Access]: Several rules provide guidance on using local storage and file system APIs for performance. For example, rules/server-hoist-static-io.md demonstrates how to use the Node.js fs module to hoist static asset loading to the module level to avoid repeated I/O. Similarly, rules/client-localstorage-schema.md provides best practices for versioning and minimizing data stored in localStorage to ensure client-side efficiency and stability.
  • [Network and Data Fetching Patterns]: The skill emphasizes eliminating network waterfalls through concurrent data fetching using Promise.all() and component composition. It also discusses minimizing data serialization at React Server Component boundaries to reduce payload sizes sent over the network.
  • [Security Practices in Examples]: The skill includes a dedicated section on securing Server Actions (rules/server-auth-actions.md). It explicitly advises developers to treat server-side functions as public endpoints and implement internal authentication and authorization checks, which is a positive security pattern for modern web applications.
  • [Documentation Generation]: The skill includes build scripts (e.g., pnpm build) to compile individual rule files into a single AGENTS.md file. This is a standard documentation management process for maintaining large sets of guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:24 AM
Security Audit — agent-trust-hub — vercel-react-best-practices