Vercel Agent Skills
vercel-labs/agent-skillsVercel's official 9-skill pack: React and Next.js performance rules, composition patterns, UI and writing review, React Native, deploy and cost audit.
Recommended
Broad access Depth 3/5
Callstack Agent Skills Claude skills
React Native skills from Callstack: performance, navigation, TV apps, upgrades, brownfield migration, GitHub Actions builds and device-driven testing.
Our verdict Recommended
Well-organized, reference-heavy skills from an experienced React Native shop, kept current and bundled by task.
What Callstack Agent Skills does
Callstack Agent Skills bundles React Native know-how from a consultancy that builds production apps. The Callstack-maintained skills are react-native-best-practices (profiling and fixing FPS, startup, memory, bundle size and native integration, with a very large reference set of 42 files), react-native-tv-best-practices (focus, remote input, playback, packaging, accessibility, 27 references), react-navigation for version 7, create-react-native-library, upgrading-react-native (template diffs, dependency and native updates, verification), github-actions for building downloadable iOS simulator and Android emulator artifacts, assess-react-native-migration, react-native-brownfield-migration and writing-user-docs.
The repo groups them into three plugin bundles: building, testing and migrating. The testing bundle also pulls in outside skills: React Native Testing Library, agent-device, which drives iOS and Android apps with snapshots, taps and screenshots, and dogfood, an exploratory QA skill that returns a structured report with screenshots and repro steps. The vendored agent-device and dogfood folders are included in the repo. Skills average about 6.6 KB, many have deep reference folders, and there is a validate-skills maintainer command. The repo has CI but no test suite for the skills themselves, and the Codex plugin install is the primary documented route.
Good for
- React Native teams profiling and tuning app performance
- Planning React Native upgrades or brownfield adoption
- Building CI artifacts and running agent-driven mobile QA
Not for
- Expo-specific services work, where Expo's own skills fit better
- Native-only or Flutter projects
What's inside depth 4/5
13 skills averaging 6.6 KB, with 42 reference files in the performance skill and 27, 12 and 8 in others, plus vendored device-automation skills, but no scripts or evals of its own.
- Skills
- 13
- Reference docs
- 112
- Scripts
- 0
- Tests / evals
- 0
- Templates
- 1
- Avg SKILL.md
- 6.5 KB
Counted from the repository file tree. How we score depth.
Dependencies and costs
- Node.js and a React Native project
- Xcode and Android SDK/emulators for device automation
- agent-device CLI for the testing bundle
- GitHub Actions for the artifact-build skill
Security review
Review before installingCallstack's React Native skills bundle, mostly Markdown. The testing plugin vendors an agent-device skill whose frontmatter pre-approves the agent-device CLI (including via npx without a version pin) to drive simulators and devices. Maintainer shell scripts that refresh vendored skills are included but are not part of the skill workflow.
Worth knowing
- Runs remote code at an unpinned versionDevice automation uses
npx agent-devicewith no version pin; other skills use unpinnednpx create-react-native-library,npx expo,npx react-native.plugins/vendored/.agents/skills/dogfood/SKILL.md:4 - Relies on a CLI or package we could not reviewDepends on the agent-device CLI/daemon, Xcode, Android SDK and React Native tooling that are not in this repo.plugins/vendored/.agents/skills/dogfood/SKILL.md:4
- Makes network requestsUpgrade skill downloads diffs from raw.githubusercontent.com/react-native-community/rn-diff-purge with curl; the GitHub Actions skill calls api.github.com with $GITHUB_TOKEN; agent-device remote docs call a user-configured daemon URL.skills/upgrading-react-native/SKILL.md:29
- Installs packages or toolsSkills instruct installing/scaffolding npm and native dependencies (create-react-native-library, pod-install, dependency upgrades).skills/create-react-native-library/SKILL.md:36
What we checked
The repository (177 files) on Oct 29, 2026. Not a full review: it relies on code outside the repository: npm package agent-device (run by dogfood/agent-device skills via npx); npm package `skills` CLI (run by plugins/vendored/scripts via npx -y); React Native tooling invoked by skills (expo, react-native CLI, create-react-native-library, pod-install).
NVIDIA SkillSpector static scan: 147 pattern hits (MCP Rug Pull 112, Agent Snooping 13, Rogue Agent 5, Privilege Escalation 4, Excessive Agency 4, Data Exfiltration 3). SkillSpector hits are overwhelmingly unpinned npx mentions in React Native docs, documentation phrases ('clear state', '.env' in bundling guidance, 'without warning'), and a curl example with a placeholder daemon token in agent-device docs. The rm -rf in lib.sh is a maintainer script deleting the vendored .agents folder it is about to replace.
A review, not a certification. Skills change after we check them — read the files before installing.
License
MIT — commercial use allowed.
Can it run unattended?
Not really. Skills are task guides; the dogfood QA skill produces reports but is run interactively by a developer.
Alternatives to Callstack Agent Skills
Web Quality Skills
addyosmani/web-quality-skillsSix skills by Addy Osmani for auditing and fixing web performance, Core Web Vitals, accessibility, SEO and best practices, built around Lighthouse.
Recommended
Check first Depth 3/5
Flutter agent plugins
flutter/agent-pluginsTask skills for Dart and Flutter work: tests, static analysis, layout fixes, routing, JSON serialization, FFI, documentation and API review.
Recommended
Check first Depth 2/5
FAQ
What are Callstack Agent Skills?
They are agent skills from Callstack for React Native work: performance, navigation, TV apps, library creation, upgrades, migration assessment and mobile testing. They come in three plugin bundles for building, testing and migrating.
How do I install Callstack Agent Skills?
In Codex, open Plugins, search for react native and install a bundle. For other assistants run npx skills@latest add callstackincubator/agent-skills --skill '*', or pass a single skill name such as react-native-best-practices.
Is it safe to install?
The repository is mostly markdown with no helper scripts that we found. The testing skills do instruct an agent to drive simulators and devices through the agent-device CLI.
Callstack skills vs Expo skills?
Callstack's focus on core React Native topics such as performance, navigation, TV and upgrades applies to any React Native app. Expo's skills cover Expo Router, EAS services and Expo-specific tooling. Expo projects can reasonably use both.
Sources: GitHub repository (stars, license, file tree, last push Oct 8, 2026). Review based on the README and SKILL.md files as published.