developing-react
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's
INSTRUCTIONS.mdfile recommends executingnpx -y react-doctor@latest ., which fetches thereact-doctorpackage and its dependencies from the NPM registry at runtime. It also references numerous other NPM packages for state management, testing, and UI components throughout the documentation. - [COMMAND_EXECUTION]: Explicit shell commands are provided for the AI agent to run diagnostics, such as
npx -y react-doctor@latest .. The use of the-yflag allows the command to proceed with installation and execution automatically, bypassing manual user confirmation. - [REMOTE_CODE_EXECUTION]: Recommending the execution of the
react-doctortool vianpxconstitutes a remote code execution pattern, as it triggers the download and immediate execution of code from an external repository onto the local environment.
Audit Metadata