react-components-and-hooks

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a linter script, check-react-rules.mjs, designed to be executed locally to verify code against React best practices.
  • [DYNAMIC_EXECUTION]: The selftest.mjs script utilizes spawnSync to programmatically execute the checker script against test fixtures for validation purposes.
  • [INDIRECT_PROMPT_INJECTION]: The check-react-rules.mjs script processes local .ts and .tsx files as part of its linting process.
  • Ingestion points: The linter reads source code from the local file system within the user's project directory.
  • Boundary markers: The script employs comment and code masking (maskComments, maskCode) to isolate code segments from prose/comments before analysis.
  • Capability inventory: The scripts use fs.readFileSync for file access and child_process.spawnSync for internal testing.
  • Sanitization: Content is sanitized through lexing and masking to ensure regex-based rules only target valid code structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 11:22 AM