vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE] (SAFE): The skill is authored by Vercel, a trusted organization in the ecosystem. The content is educational, accurate, and follows industry best practices for performance and architecture.
- [NO_CODE] (SAFE): The skill consists entirely of Markdown documentation and rule files. It does not contain any executable scripts (.js, .py, .sh), binaries, or automation files, eliminating the risk of direct malicious execution.
- [Security Guidance] (SAFE): The skill includes security-positive rules, such as
server-auth-actions.md, which explicitly warns about treating Server Actions as public API endpoints and provides correct patterns for authentication and authorization. - [Trusted Dependencies] (SAFE): All referenced third-party libraries (e.g.,
swr,lru-cache,zod,lucide-react) are reputable, widely-used, and standard packages in the modern web development landscape.
Audit Metadata