react-server-components-framework

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the dynamic context injection syntax (e.g., !grep, !find) in scripts/create-server-component.md to automatically detect the project's environment, such as the Next.js version, database client, and directory structure. These commands are limited to local filesystem inspection for the purpose of personalizing code templates and do not involve network exfiltration or destructive operations.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries such as next, react, zod, prisma, drizzle, and dompurify. These are industry-standard dependencies for the stated purpose of the skill.
  • [COMMAND_EXECUTION]: The framework includes guidelines for creating Server Actions and using CLI tools like npm and npx for standard migration and linting tasks (e.g., npx @next/codemod). These instructions are consistent with official Next.js documentation and development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 12:06 AM