next-js-16-launchpad
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide and utility for bootstrapping Next.js 16 applications. No malicious patterns were identified in the scripts or documentation.
- [COMMAND_EXECUTION]: The script
scripts/bootstrap-nextjs16.ps1utilizes official tools likenpx create-next-appandnpm installto set up new projects. These commands are clearly documented, target official packages, and are necessary for the skill's stated purpose of project initialization. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
jsonplaceholder.typicode.comfor demonstration purposes and references official Next.js documentation and repositories. These are well-known and trusted services. - [DATA_EXFILTRATION]: Authentication patterns and proxy examples provided in the skill use standard local cookie-based logic for routing and do not exfiltrate sensitive information.
- [PROMPT_INJECTION]: The skill's instructions are purely technical and contain no attempts to override agent behavior or bypass safety guardrails.
Audit Metadata