dtsong/vercel-react-best-practices
skills/vercel-react-best-practices/SKILL.md
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
$ install --global
skillsauthnpx skillsauth add dtsong/my-claude-setup vercel-react-best-practicesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 28, 2026, 4:36 AM145.6s2 files scanned
SKILL.md
- name:
- vercel-react-best-practices
- description:
- React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
- license:
- MIT
- author:
- vercel
- version:
- 1.0.0
React Best Practices (Upstream)
This is a lightweight stub skill that fetches the latest React Best Practices guidance from Vercel's upstream repository at runtime.
It intentionally avoids vendoring the full rule set so updates can be adopted quickly and attribution stays clear.
Upstream Sources
- Repository: https://github.com/vercel-labs/agent-skills/tree/main/skills/react-best-practices
- Announcement: https://vercel.com/blog/introducing-react-best-practices
Guidelines Source
Fetch fresh guidance before each review:
https://raw.githubusercontent.com/vercel-labs/agent-skills/main/skills/react-best-practices/AGENTS.md
Process
- Fetch the upstream
AGENTS.md. - Use it as the authoritative rulebook for React/Next.js performance.
- Apply relevant rules to the current code/task.
Output Format
- Provide actionable recommendations.
- When possible, cite the upstream rule section heading (and/or a short identifier) so the change can be traced to the upstream guidance.
Quality Checks
- Do not propose micro-optimizations if there are obvious waterfalls or bundle bloat issues.
- Prefer changes that are correct-by-construction (avoid flaky memoization patterns).
- Be explicit about trade-offs and when not to apply a rule.
Offline Snapshot (Optional)
If you want an offline copy of the full rule set, install the upstream repo separately and link it into your Claude Code skills directory.
See skills/vercel-react-best-practices/README.md for an example.
Related Skills
dtsong/docx-to-pdf
testing
VerifiedTrustedCommunity
Use to convert a Word .docx file to PDF and/or verify its page count. Triggers on: converting docx to pdf, rendering a document, checking how many pages a docx produces, or asserting a page-count constraint (e.g. a resume must stay 2 pages). Wraps LibreOffice headless conversion.
5SKILL.mdUpdated Jun 11, 2026
dtsong/web-security-hardening
development
VerifiedTrustedCommunity
Security audit checklist for web applications. Use when reviewing, auditing, or hardening a web app's security posture. Covers rate limiting, auth headers, IP blocking, CORS, security middleware, input validation, file upload limits, ORM usage, and password hashing. Triggers on requests like "review security", "harden this app", "security audit", "check for vulnerabilities", or when building/reviewing API endpoints.
5SKILL.mdUpdated Apr 28, 2026
dtsong/prompt-wizard
development
VerifiedTrustedCommunity
Interactive wizard to craft effective prompts using Claude Code best practices
5SKILL.mdUpdated Apr 28, 2026
dtsong/gh-triage
tools
VerifiedTrustedCommunity
Use when batch labeling, prioritizing, and assigning GitHub issues during triage sessions.
5SKILL.mdUpdated Apr 26, 2026