nextjs-v16
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several official packages and tools for migration, including
next,react, and@next/codemod. These are standard dependencies sourced from Vercel, which is a well-known and trusted organization. - [REMOTE_CODE_EXECUTION]: The migration checklist suggests running
@next/codemodvianpx. This involves downloading and executing code from the npm registry. As these are official tools provided by Next.js/Vercel for framework upgrades, this is considered a safe and standard development practice. - [INDIRECT_PROMPT_INJECTION]: As a tool designed to guide code transformation, the skill has an inherent surface for indirect prompt injection. However, the instructions provided are specific to legitimate migration logic and do not exhibit any malicious intent or attempts to subvert agent behavior.
Audit Metadata