clerk-react-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate templates and documentation for integrating Clerk authentication into React applications. It uses official packages and follows industry standards for client-side authentication and secret management.
- [EXTERNAL_DOWNLOADS]: The skill installs the official
@clerk/reactpackage and standard React development tools including Vite and TypeScript. These are well-known resources from a trusted vendor for the stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill includes patterns for rendering data fetched from the Clerk API, such as user profile information and authentication error messages. While these represent ingestion points for external data, the risk is minimal as the patterns use standard React rendering which mitigates common injection vectors.
- Ingestion points: Clerk API responses provided via
useUseranduseAuthhooks, and custom sign-in error handling. - Boundary markers: Not explicitly implemented in snippets, as is typical for UI component documentation.
- Capability inventory: The skill is scoped to client-side UI logic and web requests; it contains no subprocess execution, file writing, or high-privilege operations.
- Sanitization: Utilizes standard React output escaping for all rendered data.
Audit Metadata