40Medium
The skill misrepresents itself as a
Behavior Analysis
Mismatch detected — The skill claims to be a 'comprehensive guide' that can 'guide automated refactoring and code generation'. However, the provided content is merely an index or table of contents for a guide, not the guide itself, nor does it perform any active guidance, refactoring, or code generation. The actual detailed rules and examples are referenced as external files.
Claims to do
Vercel React Best Practices: Comprehensive performance optimization guide for React and Next.js applications, maintained by Vercel. Contains 70 rules across 8 categories, prioritized by impact to guide automated refactoring and code generation.
Actually does
This skill's content is a descriptive index of 70 React and Next.js performance optimization rules, categorized by priority. It lists rule names and categories but does not contain the detailed explanations or code examples for each rule, instead referencing external markdown files (e.g., `rules/async-parallel.md`, `AGENTS.md`). It does not call any tools, run commands, access data beyond its own text, or contact URLs.
Skill Info
Namevercel-labs/agent-skills/vercel-react-best-practices
Registrygithub
Versionce3e64e468f8
PURLpkg:github/vercel-labs/agent-skills@ce3e64e468f8?skill=vercel-react-best-practices
Stars26,180
Installs374,600
Source
SHA-25671ed7794962f...
SHA-1848870574f33...
MD5995a667ef0b5...
TLSH4ae1b512b408...
ssdeep192:9KZ/driH...
Size7,251 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Skills.shDocs
npx skills add https://github.com/vercel-labs/agent-skillsAssessments (1)
AI Agent Traps ↗Description Mismatchmediumdescription mismatch
The skill claims to be a 'comprehensive guide' that can 'guide automated refactoring and code generation'. However, the provided content is merely an index or table of contents for a guide, not the guide itself, nor does it perform any active guidance, refactoring, or code generation. The actual detailed rules and examples are referenced as external files.
85% confidence
Claim: 'guide automated refactoring and code generation'. Actual: 'Read individual rule files for detailed explanations and code examples: `rules/async-parallel.md`' and 'Full Compiled Document: `AGENTS.md`'.
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/vercel-labs/agent-skills/vercel-react-best-practices)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/vercel-labs/agent-skills/vercel-react-best-practices"><img src="https://mondoo.com/ai-agent-security/api/badge/github/vercel-labs/agent-skills/vercel-react-best-practices.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/vercel-labs/agent-skills/vercel-react-best-practices.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow