react-setup
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Vite scaffolding tool and necessary libraries (axios, react-router-dom) from the official npm registry.
- [COMMAND_EXECUTION]: Uses standard shell commands to manage project initialization, package installation, and build verification.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill's behavior aligns entirely with its documented purpose of project scaffolding. No sensitive information is exfiltrated, and network operations are limited to the official npm registry and a local proxy for development.
Audit Metadata