Loading

heating the forge...

@forgecat/vercel-labs_agent-skills_react-view-transitions — Security Risk Report | ForgeCat

vercel-labs_agent-skills_react-view-transitions

Security risk report for @forgecat/vercel-labs_agent-skills_react-view-transitions v0.0.13

Source Integrity

Low

Profile is sourced from Vercel's official agent-skills repository (vercel-labs), a trusted first-party source.
Metadata correctly attributes authorship to Vercel and references the original GitHub repository with MIT license.

Agent Intent

Low

Content is purely educational documentation for React's View Transition API—no instructions to manipulate the AI, read credentials, exfiltrate data, or hide instructions.
Guidance is legitimate and security-conscious (e.g., 'never call startViewTransition yourself', accessibility via prefers-reduced-motion, graceful degradation).
No prompt injection, system prompt leakage, guidance poisoning, or malicious knowledge planting detected.

Details

Evidence

Profile describes standard React/Next.js patterns: 'Declare what with <ViewTransition>, trigger when with startTransition / useDeferredValue / Suspense, control how with CSS classes.'
Accessibility guidance: '@media (prefers-reduced-motion: reduce) { animation-duration: 0s !important; }'
No external URL fetching, no instructions to install attacker-controlled packages, no weakening of security defaults.

Permissions

Low

Profile declares no tools, MCP servers, or file system/shell access—it is pure documentation and CSS recipes.
Authority is minimal and matches stated purpose: guiding AI agents to implement React animations using standard browser APIs.

Details

Evidence

No 'tools' or 'mcp_servers' sections in profile metadata.
Content is read-only guidance; no file writes, deletions, or mutations requested.

MCP Risk

Low

No MCP servers are defined in the profile.
No external binary execution, network access, or filesystem operations are configured.

Details

Evidence

Profile contains no 'mcp_servers' configuration block.

Evaluation Details

Status: Completed
Checks completed: 4/4
Flagged: 0
Evaluated: 8/25/2026