react-webapp
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines a standard and secure architectural pattern for building React applications using Vite, TypeScript, and Nginx.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill explicitly mandates a runtime configuration approach where environment-specific values (like API URLs and OIDC config) are injected by the platform at request time, preventing sensitive data from being embedded in static build artifacts.
- [COMMAND_EXECUTION]: The instructions utilize standard development commands for the React/Node.js ecosystem, including
npm install,npm run build, andnpxfor type-checking and code generation. These commands are used for their intended purposes within a standard CI/CD and development workflow. - [EXTERNAL_DOWNLOADS]: The skill references established, industry-standard Node.js libraries (
openapi-typescript,openapi-fetch) for handling API contracts. These are fetched via the standard NPM registry. - [SAFE]: The guidance regarding
npm auditis presented as an architectural choice to maintain dependency stability for development tools that do not impact the production static assets, which is a common trade-off in specific build environments.
Audit Metadata