next-cache-components
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill documents the use of Next.js server-side APIs such as
cookies()andheaders(). These are standard framework features for managing session state and request metadata. The examples are provided for educational purposes and do not involve exfiltration to external domains. - [INDIRECT_PROMPT_INJECTION]: The documentation describes how to handle untrusted user input from cookies and search parameters. This identifies a known architectural attack surface for web applications, but the skill itself does not process runtime data or provide tool execution capabilities that would facilitate an exploit.
- [EXTERNAL_DOWNLOADS]: The skill references the official Next.js documentation and Vercel's GitHub repositories. These are well-known, trusted sources for web development configuration and guidelines.
Audit Metadata