route-based-permissions
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill. The instructions and code snippets align with established security best practices for access control and permission management.
- [SAFE]: The skill emphasizes defense-in-depth, specifically noting that middleware-level role checks should be complemented by handler-level resource ownership validation.
- [SAFE]: The provided Next.js middleware example correctly identifies and documents common configuration pitfalls, such as the exclusion of API routes from global middleware matching, ensuring developers are aware of the security perimeter.
Audit Metadata