busirocket-nextjs
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces a 'Thin Handler' architecture, which improves security by ensuring that route handlers only manage HTTP concerns (validation, response shaping) while delegating business logic and database operations to a separate service layer.
- [SAFE]: It explicitly mandates that all request inputs must be validated using Zod schemas or type guard helpers before processing, effectively mitigating potential injection or malformed data attacks at the application boundary.
- [SAFE]: The guidelines include specific instructions for protecting server-only code (such as database credentials and environment secrets) from being leaked into client-side bundles by using specialized imports and component boundary markers.
- [SAFE]: Standardized JSON response shapes are promoted for both success and error cases, which helps prevent information disclosure through inconsistent error messages or unhandled exceptions.
Audit Metadata