Agent skill · Audited from source
react-native-best-practices
skill · callstackincubator/agent-skillsMIT licenceAudited 24 Oct 2026 · source 0e6278daa242
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 0e6278daa242 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 6 findings, 0 critical or high. What it does: Provides React Native performance optimization guidelines for FPS, TTI, bundle size, memory leaks, re-renders, and animations. Applies to tasks involving Hermes optimization, JS thread blocking, bridge overhead,…
Cite
Cite this page
ModelsAtlas. “react-native-best-practices (callstackincubator/agent-skills)”. Retrieved 24 Oct 2026. https://modelsatlas.com/skills/callstackincubator/react-native-best-practices
2 skills are called “react-native-best-practices”. You are viewing callstackincubator/agent-skills.
- callstackincubator/agent-skills★ 1.7k!CAUTION
- LeoYeAI/openclaw-master-skills★ 2.2k✓SAFE
Trust audit
Audit 0.4.1 · source read 24 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 6 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (6)
MEDIUMInventory / provenanceinv.symlink · plugins/building-react-native-apps/skills/create-react-native-library
plugins/building-react-native-apps/skills/create-react-native-library
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/building-react-native-apps/skills/react-native-best-practices
plugins/building-react-native-apps/skills/react-native-best-practices
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/building-react-native-apps/skills/react-native-tv-best-practices
plugins/building-react-native-apps/skills/react-native-tv-best-practices
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/building-react-native-apps/skills/react-navigation
plugins/building-react-native-apps/skills/react-navigation
- Why
- link not followed
- Fix
- —
LOWInventory / provenanceinv.symlink · CLAUDE.md
CLAUDE.md
- Why
- link not followed
- Fix
- —
INFOInventory / provenanceinv.oversize · references/images/view-hierarchy-flattening.png
references/images/view-hierarchy-flattening.png
- Why
- 2587021 bytes not read
- Fix
- —
Audit 0.4.1 · source sha 0e6278daa242 · 24 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishercallstackincubator GitHub organizationOwner of the repository this skill is read from
- Source foldercallstackincubator/agent-skills/skills/react-native-best-practicesThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict0e6278daa242A new audit runs when the source changes
- Repository statusNot archivedLast push 15 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Provides React Native performance optimization guidelines for FPS, TTI, bundle size, memory leaks, re-renders, and animations. Applies to tasks involving Hermes optimization, JS thread blocking, bridge overhead,…
--- name: react-native-best-practices description: Provides React Native performance optimization guidelines for FPS, TTI, bundle size, memory leaks, re-renders, and animations. Applies to tasks involving Hermes optimization, JS thread blocking, bridge overhead, FlashList, native modules, or debugging jank and frame drops. license: MIT --- # React Native Best Practices ## Overview Performance optimization guide for React Native applications, covering JavaScript/React, Native (iOS/Android), and bundling optimizations. Based on Callstack's "Ultimate Guide to React Native Optimization". ## When to Apply Reference these guidelines when: - Debugging slow/janky UI or animations - Investigating memory leaks (JS or native) - Optimizing app startup time (TTI) - Reducing bundle or app size - Writing native modules (Turbo Modules) - Profiling React Native performance - Reviewing React Native code for performance ## Security Notes - Treat shell commands in these references as local developer operations. Review them before running, prefer version-pinned tooling, and avoid piping remote scripts directly to a shell. - Treat third-party libraries and plugins as dependencies that still require normal supply-chain controls: pin versions, verify provenance, and update through your standard review process. - Treat remote chunk loading as first-party artifact delivery only. Prefer app-bundled chunks or signed CI release manifests; hosted chunks must come from trusted HTTPS origins you control and be pinned to the current app release. ## Priority-Ordered Guidelines | Priority | Category | Impact | Prefix | |----------|----------|--------|--------| | 1 | FPS & Re-renders | CRITICAL | `js-*` | | 2 | Bundle Size | CRITICAL | `bundle-*` | | 3 | TTI Optimization | HIGH | `native-*`, `bundle-*` | | 4 | Native Performance | HIGH | `native-*` | | 5 | Memory Management | MEDIUM-HIGH | `js-*`, `native-*` | | 6 | Animations | MEDIUM | `js-*` | Impact labels are triage hints: CRITICAL first, HIGH next, MEDIUM when evidence points there. ## Quick Reference ### Optimization Workflow Follow this cycle for any performance issue: **Measure → Optimize → Re-measure → Validate** 1. **Measure**: Capture baseline metrics before changes. For runtime issues, prefer commit timeline, re-render counts, slow components, heaviest-commit breakdown, and startup/TTI when available. Component tree depth or count are optional context, not substitutes. Do not recommend memoization, atomic state, or compiler changes without a measured render or FPS problem. 2. **Optimize**: Apply the targeted fix from the relevant reference 3. **Re-measure**: Run the same measurement to get updated metrics 4. **Validate**: Confirm improvement (e.g., FPS 45→60, TTI 3.2s→1.8s, bundle 2.1MB→1.6MB) If metrics did not improve, revert and try the next suggested fix. ### Review Guardrails - Check library versions before suggesting API-specific fixes. Example: FlashList v2 deprecates `estimatedItemSize`, so do not flag it as missing there. - Do not suggest `useMemo` or `useCallback` dependency changes unless behavior is demonstrably incorrect or profiling shows wasted work tied to that value. - Do not report stale closures speculatively. Show the stale read path, a repro, or profiler evidence before calling it out. - When profiling a flow, measure the target interaction itself. Do not treat component tree depth or component count as the main performance evidence. ### Critical: FPS & Re-renders **Profile first:** ```bash agent-device react-devtools status agent-device react-devtools wait --connected agent-device react-devtools profile start agent-device react-devtools profile stop agent-device react-devtools profile slow --limit 5 agent-device react-devtools profile rerenders --limit 5 agent-device react-devtools profile timeline --limit 20 ``` Drive the target interaction with normal `agent-device` commands between `profile start` and `profile stop`. Manual fallback when `agent-device` is unavailable: open React Native DevTools from Metro (`j`) or the Dev Menu, use the Profiler tab, and record the same interaction. For release-build React component profiling, connect [`@callstack/inspector`](https://github.com/callstackincubator/inspector#inspector) first so React DevTools can attach to the release app, then run the `agent-device react-devtools` flow above. **Common fixes:** - Replace ScrollView with FlatList/FlashList/Legend List for long lists - After profiling shows cascading re-renders, use React Compiler for automatic memoization - After profiling shows broad store/context updates, use atomic state (Jotai/Zustand) to reduce re-renders - Use `useDeferredValue` for expensive computations ### Critical: Bundle Size **Analyze bundle:** ```bash npx react-native bundle \ --entry-file index.js \ --bundle-output output.js \ --platform ios \ --sourcemap-output output.js.map \ --dev false --minify true npx source-map-explorer output.js --no-border-checks ``` **Verify improvement after optimization:** ```bash # Record baseline size before changes ls -lh output.js # e.g., Before: 2.1 MB # After applying fixes, re-bundle and compare npx react-native bundle --entry-file index.js --bundle-output output.js \ --platform ios --dev false --minify true ls -lh output.js # e.g., After: 1.6 MB (24% reduction) ``` **Common fixes:** - Avoid barrel imports (import directly from source) - Remove unnecessary Intl polyfills only after checking Hermes API and method coverage - Evaluate tree shaking (Expo SDK 52+ experimental unused import/export removal, or Re.Pack only if already configured) - Enable R8 for Android native code shrinking ### High: TTI Optimization **Measure TTI:** - Use `react-native-performance` for markers - Only measure cold starts (exclude warm/hot/prewarm) **Common fixes:** - For React Native 0.78 and earlier, disable Android JS bundle compression to enable Hermes mmap - Use native navigation (react-native-screens) - Preload c
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 0e6278d
npm install -D eslint-plugin-no-barrel-files npm install @rnx-kit/metro-serializer-esbuild npm install react-native-reanimated react-native-worklets npm install jotai npm install zustand
git clone https://github.com/callstackincubator/agent-skills git -C agent-skills checkout 0e6278daa242
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 0e6278daa242 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
0e6278daa242
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/callstackincubator/react-native-best-practices/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All coding & review skills →obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/callstackincubator/react-native-best-practices/)
<a href="https://modelsatlas.com/skills/callstackincubator/react-native-best-practices/"><img src="https://modelsatlas.com/skills/callstackincubator/react-native-best-practices/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about react-native-best-practices
What does the react-native-best-practices skill do?
Is react-native-best-practices safe to install?
What can react-native-best-practices access on my machine?
How current is this page?
Sources
- github.com/callstackincubator/agent-skills/tree/main/skills/reac — the audited source at commit 0e6278daa242 and every finding aboveObserved · 24 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the react-native-best-practices skill do?
- Is react-native-best-practices safe to install?
- What can react-native-best-practices access on my machine?