vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- Client-Side Script Injection Pattern: In
rules/rendering-hydration-no-flicker.md, the skill demonstrates the use ofdangerouslySetInnerHTMLto inject an inline script. This is a documented pattern for managing client-side state like themes before hydration to prevent flickering. While injecting scripts can be a security consideration if the content is user-controlled, this example uses static logic to safely update the DOM. - Authentication Best Practices: The skill explicitly includes a specific rule (
rules/server-auth-actions.md) that instructs developers and agents to implement authentication within Server Actions. This is a positive security practice that addresses potential unauthorized access to server-side mutations by treating Server Actions as public endpoints. - Well-Known Dependency Integration: The skill recommends using industry-standard libraries such as
swrfor data fetching andlru-cachefor cross-request caching. These are well-regarded tools within the technology ecosystem and their inclusion is standard for performance optimization tasks. - Structural Optimization Guidance: The skill provides comprehensive instructions for AI agents to refactor React and Next.js code for performance. This includes strategies for data fetching and resource management that align with modern web development standards.
Audit Metadata