Install
$ agentstack add skill-viditkbhatnagar-immunize-react-hook-missing-dep ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
react-hook-missing-dep
When you write useEffect or useCallback, list every reactive value the body reads in the dependency array. A "reactive value" is anything whose reference can change between renders: props, state from useState/useReducer, context values, and other hook results.
Declare the dep even if it feels obvious that the value is stable. React's exhaustive-deps lint catches this, and relying on it slows you down; write the array correctly the first time.
Example
Wrong — count changes but is missing from the deps array, so the effect uses the stale value from the first render:
function Counter() {
const [count, setCount] = useState(0);
useEffect(() => {
document.title = `Count: ${count}`;
}, []);
return setCount(count + 1)}>{count};
}
Right — count is declared, so the effect re-runs when it changes:
function Counter() {
const [count, setCount] = useState(0);
useEffect(() => {
document.title = `Count: ${count}`;
}, [count]);
return setCount(count + 1)}>{count};
}
When an empty deps array is correct
Only when the effect genuinely runs once and the body references NO reactive values. If you write [] to "silence the warning," either move the stable reference outside the component or wrap the function in useCallback with its own correct deps. Do not paper over missing deps with eslint-disable comments.
Immunity note
This pattern is a source-level check, not a runtime behavioral test. The verification asserts the deps array lists every useState identifier the hook body references. It cannot catch every stale-closure bug (some are semantic), but it prevents the most common shape the AI produces.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: viditkbhatnagar
- Source: viditkbhatnagar/immunize
- License: Apache-2.0
- Homepage: https://pypi.org/project/immunize/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.