route-based-permissions
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard, high-quality architectural guidance for implementing access control in fullstack applications using React, Express, and Next.js.
- [SAFE]: The code snippets demonstrate defensive programming, specifically advising developers to return 404 status codes instead of 403 to prevent resource discovery by unauthorized users.
- [SAFE]: The pattern for Next.js middleware includes explicit warnings about configuration exclusions (matcher rules) that could leave API routes unprotected, which is a helpful security consideration for developers.
Audit Metadata