vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-centric repository providing performance guidelines. It does not contain executable malicious scripts or dangerous automation patterns.
- [EXTERNAL_DOWNLOADS]: The documentation references well-known and trusted libraries such as
swr,lru-cache, andbetter-all. It also links to official Vercel engineering blogs and React/Next.js documentation. - [COMMAND_EXECUTION]: The README describes standard development workflows using
pnpmfor building and validating the rule set, which is typical for modern JavaScript documentation projects. - [PROMPT_INJECTION]: No malicious instructions designed to override agent safety protocols or hijack the underlying model were detected. The guidelines are purely technical and focused on code optimization.
- [DATA_EXPOSURE]: No hardcoded secrets, API keys, or attempts to access sensitive system files (e.g., SSH keys, environment variables) were found. One rule specifically advises against storing sensitive data in
localStorage. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the download and execution of arbitrary remote scripts. Code examples provided are for educational purposes and follow industry standards.
Audit Metadata