react-components-and-hooks
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a linter script,
check-react-rules.mjs, designed to be executed locally to verify code against React best practices. - [DYNAMIC_EXECUTION]: The
selftest.mjsscript utilizesspawnSyncto programmatically execute the checker script against test fixtures for validation purposes. - [INDIRECT_PROMPT_INJECTION]: The
check-react-rules.mjsscript processes local.tsand.tsxfiles as part of its linting process. - Ingestion points: The linter reads source code from the local file system within the user's project directory.
- Boundary markers: The script employs comment and code masking (
maskComments,maskCode) to isolate code segments from prose/comments before analysis. - Capability inventory: The scripts use
fs.readFileSyncfor file access andchild_process.spawnSyncfor internal testing. - Sanitization: Content is sanitized through lexing and masking to ensure regex-based rules only target valid code structures.
Audit Metadata