nextjs-server-actions-security
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a defensive guide for securing Next.js Server Actions. It correctly identifies threat vectors such as IDOR, CSRF, and data leakage.
- [SAFE]: The code snippets provided demonstrate secure implementations, including resource ownership verification, schema validation using Zod, and fail-closed authorization logic.
- [SAFE]: No evidence of data exfiltration, obfuscation, or unauthorized remote code execution was found. The instructions encourage the use of standard security configurations like
allowedOriginsandHttpOnlycookies.
Audit Metadata