vercel-react-best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill consists entirely of architectural guidelines and best practices for React and Next.js development. It includes security-focused rules, such as mandatory authentication and authorization checks inside Server Actions to prevent unauthorized mutation access.
  • [NO_CODE]: No scripts, binaries, or automated execution files are included in the skill. The content is purely informational Markdown intended for the agent to use as a knowledge base.
  • [EXTERNAL_DOWNLOADS]: The documentation references several well-known and reputable third-party libraries (e.g., swr, zod, better-all, lru-cache) as part of its coding examples. These references target established open-source packages and official repositories.
  • [DYNAMIC_EXECUTION]: One guideline discusses using an inline script via dangerouslySetInnerHTML to manage theme states and prevent hydration flicker. The provided script implementation is static and benign, following standard industry patterns for client-side preference detection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:14 PM
Security Audit — agent-trust-hub — vercel-react-best-practices