vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or obfuscated code segments were detected. The skill contains benign documentation and best practices for web development.
- [EXTERNAL_DOWNLOADS]: The documentation references several well-known and legitimate packages from the React ecosystem, including
swr,lru-cache,better-all, andsvgo. These are cited for specific performance optimization techniques (caching, deduplication, and SVG minification) and do not involve untrusted or suspicious sources. - [INDIRECT_PROMPT_INJECTION]: Rule
rendering-hydration-no-flicker.mddescribes the use ofdangerouslySetInnerHTMLto inject a synchronous script for theme initialization. While this pattern creates a theoretical surface for indirect injection if misused with unsanitized user input, the provided example is a standard industry practice for preventing hydration flickering and is presented as a safe, static implementation. - [COMMAND_EXECUTION]: Rule
rendering-svg-precision.mdmentions the use ofsvgovianpxfor CLI-based SVG optimization. This is a standard developer tool used for reducing file sizes and is appropriate within the context of performance optimization guidelines.
Audit Metadata