vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and guidelines for optimizing React applications.
- [EXTERNAL_DOWNLOADS]: The skill recommends standard performance-oriented packages such as better-all and lru-cache.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for automated code generation. 1. Ingestion points: React component code and optimization tasks (SKILL.md). 2. Boundary markers: None defined. 3. Capability inventory: Generates code using dangerouslySetInnerHTML and after() (rules/rendering-hydration-no-flicker.md). 4. Sanitization: No specific guidance provided for escaping user data.
- [DYNAMIC_EXECUTION]: The skill recommends using dangerouslySetInnerHTML for script injection during hydration, which is a standard React pattern for this use case.
Audit Metadata