React Best Practices 2 0.1.0
v1.0.0React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.j...
⭐ 0· 98·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (React & Next.js performance guidance) align with the included files: SKILL.md, AGENTS.md, and 60+ rule markdown files. The skill requires no binaries, env vars, or config paths—appropriate for a documentation/instruction-only skill. Note: package metadata hints the content is from 'Vercel' but the registry/source is unknown and owner IDs in metadata differ; this is a provenance concern but does not make the capability incoherent.
Instruction Scope
SKILL.md and the rule files contain only guidance, examples, and references for refactoring or generating React/Next.js code. They do not instruct the agent to read local system files, access credentials, call unknown external endpoints, or perform arbitrary system operations. Example code mentions importing libraries (e.g., better-all, swr) as normal examples; no runtime network/exfiltration steps are present in the instructions.
Install Mechanism
No install spec and no code to execute (instruction-only). This is low risk — nothing will be downloaded or written to disk by an installer. The file set is documentation only (markdown files).
Credentials
The skill declares no required environment variables, credentials, or config paths. The examples reference normal libraries for React/Next.js development but do not require secrets. Requested environment/credential access is proportional (none).
Persistence & Privilege
always:false and default invocation settings are used. The skill does not request persistent system-level privileges or to modify other skills/config. Autonomous invocation is allowed (platform default) but this skill's content is static guidance, so autonomy does not materially increase risk.
Assessment
This skill appears to be a coherent, instruction-only guide of React/Next.js performance rules (no binaries, no env vars, no installers). Before installing: 1) Note provenance: the package lists 'Vercel' as author but has no homepage and an unknown registry owner — if you require an official Vercel doc, prefer obtaining it directly from vercel.com or the official repo. 2) Review the SKILL.md and a few rule files yourself to verify there are no hidden instructions you disagree with. 3) Because it can be invoked autonomously by agents (platform default), consider whether you want the agent to apply these rules automatically; if not, keep it user-invocable only. 4) Do not provide credentials or environment variables (none are needed). If you want higher assurance, ask the publisher for a homepage/official source or install only a vetted copy in a private environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97dr6h7haka0cs87w4htan725839yym
License
MIT-0
Free to use, modify, and redistribute. No attribution required.