ultracite — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ultracite (Rules) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<a href="https://chat.vercel.ai/"> <img alt="Next.js 14 and App Router-ready AI chatbot." src="app/(chat)/opengraph-image.png"> <h1 align="center">React Best Practices Agent</h1> </a>
<p align="center"> The free and opensource React Best Practices Agent built on 10+ years of real-world experience distilled in Skills powered by Bluebag </p>
<p align="center"> <a href="https://x.com/rauchg/status/2011179888976544134"><strong>Official Tweet</strong></a> · <a href="#getting-started"><strong>Running locally</strong></a> </p> <br/>
To load and use Skills in the ai-sdk agent, this repo uses Bluebag for managing the entire Skills lifecycle, and Vercel's ai-sdk for the actual agent plumbing.
git clone https://github.com/ohansFavour/chat-to-agent
cd chat-to-agentpnpm installCopy the example env file and fill in your keys:
cp .env.example .env.localRequired variables:
AUTH_SECRET=<generate with: openssl rand -base64 32>
POSTGRES_URL=<your PostgreSQL connection string>
BLUEBAG_API_KEY=bb_xxx#### How to get your Bluebag API key
chat-to-agent).env.local as BLUEBAG_API_KEY=bb_xxx⚠️ Keep your API key server-side only. Never expose it in client-side code.
For more details, see the Bluebag documentation.
Optional (for full functionality):
AI_GATEWAY_API_KEY=<from https://vercel.com/ai-gateway>
BLOB_READ_WRITE_TOKEN=<from Vercel Blob>
REDIS_URL=<your Redis connection string>pnpm db:migratepnpm devOpen http://localhost:3000 and start chatting.
This project uses Bluebag for using Agent Skills in ai-sdk agents
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.