frontend-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Feb 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The skill consists entirely of markdown documentation and coding rules. No executable code or malicious instructions were found.\n- [DATA_EXFILTRATION] (SAFE): The rule 'client-localstorage-schema.md' explicitly advises developers to minimize the data stored in localStorage and specifically warns against storing sensitive information like tokens or PII, which is a security-positive recommendation.\n- [EXTERNAL_DOWNLOADS] (SAFE): Documentation references standard, reputable libraries (e.g., lucide-react, @mui/material, remix-utils) and official React documentation. The use of 'npx svgo' is suggested as a manual optimization step for developers, not as a runtime command for the agent.\n- [COMMAND_EXECUTION] (SAFE): Code snippets provided are for instructional purposes and do not contain hidden or dangerous shell commands. No privilege escalation or persistence mechanisms are present.\n- [DYNAMIC_EXECUTION] (SAFE): While the 'rendering-hydration-no-flicker.md' rule demonstrates the use of 'dangerouslySetInnerHTML', it is used as a standard pattern for theme synchronization and the script content is static and safely contained within the documentation example.
Audit Metadata