react-server-components-framework

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a template and reference guide for Next.js 15 App Router development.
  • Data Handling: All database interaction patterns shown in examples/blog-app-example.tsx and templates/server-action-template.ts emphasize the use of ORMs like Prisma and input validation libraries like Zod. This promotes safe coding practices against common injection attacks.
  • Environment Variables: The documentation in references/component-patterns.md correctly instructs developers to use Server Components for sensitive data to ensure environment variables and API keys remain on the server and are never exposed to the client bundle.
  • Authentication & Authorization: The examples include session verification checks before performing mutations in Server Actions (e.g., getServerSession() in examples/blog-app-example.tsx), which is a critical security best practice.
  • Data Sanitization: The use of dangerouslySetInnerHTML in the blog example is correctly attributed to rendering processed content, and the implementation checklist specifically reminds users to sanitize user input to prevent XSS.
  • Network Operations: All fetch operations and external resources (Next.js, React, Prisma, Zod) are directed towards well-known, trusted framework documentation and official repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:41 PM