React Modernization

Upgrade React apps by migrating class components to hooks, adopting React 18/19 concurrent features, running codemods, and adding TypeScript types.

This skill is documentation-only and does not bundle code or request credentials, so its immediate footprint is small. Two practical cautions: (1) The guide mentions automated codemods but does not include them — if you or the agent fetches codemods from third-party URLs, review those scripts before running them (run on a branch/backup, inspect the code, and prefer official repo releases). (2) README contains example npx commands (one referencing a raw GitHub tree URL) that look nonstandard — treat any npx/add/download commands as potentially executing external code and verify the source before running. Otherwise, the skill appears coherent with its stated purpose.

Type: OpenClaw Skill Name: react-modernization Version: 1.0.0 The `SKILL.md` file, which contains instructions for the AI agent, is benign and focuses solely on React modernization tasks, using standard development tools like `npx codemod` and `rg`. However, the `README.md` file includes an installation instruction `npx add https://github.com/wpank/ai/tree/main/skills/frontend/react-modernization`. This `npx add` command is non-standard and, if interpreted as a mechanism for executing arbitrary code from a remote URL, represents a supply chain vulnerability during installation. While not directly malicious in its intent to steal data or create backdoors, it introduces a risky capability in the installation process, classifying the bundle as suspicious.