vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The skill's primary content consists of markdown documentation with 'Incorrect' and 'Correct' code examples designed to guide an AI agent in writing performant React code. All analyzed code samples follow industry-standard performance and security patterns.
- [CREDENTIALS_UNSAFE] (SAFE): The rule 'server-auth-actions.md' specifically educates on the importance of authenticating Server Actions, promoting secure coding practices rather than introducing vulnerabilities. No hardcoded secrets or keys were found across the 62 files.
- [EXTERNAL_DOWNLOADS] (SAFE): The skill references reputable libraries such as 'swr', 'lru-cache', and 'better-all' (authored by a known Vercel engineer). These are standard in the React ecosystem and used for their intended optimization purposes.
- [COMMAND_EXECUTION] (SAFE): Standard development scripts (
pnpm build,pnpm validate) are described for maintaining the documentation. No suspicious or obfuscated command-line operations were detected. - [DATA_EXFILTRATION] (SAFE): Usage of
localStorageandcookiesin examples is confined to legitimate state management and performance caching patterns (e.g., theme persistence). There are no network calls targeting unauthorized external domains.
Audit Metadata