beforemerge-nextjs-review
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: Documentation-only content. The skill consists entirely of Markdown files providing guidelines, code examples, and instructions for an AI agent to perform code reviews. It does not contain any executable scripts, binary files, or automated network operations.
- [SAFE]: False positive credentials. Static analysis flagged a hardcoded database connection string in
rules/quality/qual-no-hardcoded-secrets.md. This is a false positive as the string is contained within a code block explicitly labeled as an 'Incorrect' example to teach the agent which patterns to flag as insecure in user code. - [SAFE]: Educational purpose. The skill includes references to real-world vulnerabilities (CVEs) and security best practices from established organizations like OWASP and CWE, intended to enhance the agent's auditing capabilities.
Audit Metadata