react-server-components-framework
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a template and reference guide for Next.js 15 App Router development.
- Data Handling: All database interaction patterns shown in
examples/blog-app-example.tsxandtemplates/server-action-template.tsemphasize the use of ORMs like Prisma and input validation libraries like Zod. This promotes safe coding practices against common injection attacks. - Environment Variables: The documentation in
references/component-patterns.mdcorrectly instructs developers to use Server Components for sensitive data to ensure environment variables and API keys remain on the server and are never exposed to the client bundle. - Authentication & Authorization: The examples include session verification checks before performing mutations in Server Actions (e.g.,
getServerSession()inexamples/blog-app-example.tsx), which is a critical security best practice. - Data Sanitization: The use of
dangerouslySetInnerHTMLin the blog example is correctly attributed to rendering processed content, and the implementation checklist specifically reminds users to sanitize user input to prevent XSS. - Network Operations: All fetch operations and external resources (Next.js, React, Prisma, Zod) are directed towards well-known, trusted framework documentation and official repositories.
Audit Metadata