nextjs
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a verification script (
scripts/verify.sh) that automates standard development tasks such as linting, type-checking, testing, and building the project. This script uses well-known package managers (npm, yarn, pnpm) to execute local project dependencies and does not perform any unauthorized or malicious operations. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes project configuration and source code.
- Ingestion points: The skill reads
package.json,next.config.ts,proxy.ts,middleware.ts, and application source files to determine configuration settings and the appropriate caching model. - Boundary markers: There are no specific boundary markers or instructions for the agent to treat ingested project data as untrusted or to ignore instructions embedded within those files.
- Capability inventory: The skill can execute local shell commands via the provided
verify.shscript and is intended to modify project source code based on its instructions. - Sanitization: While the skill provides instructions on how to sanitize application data using DOMPurify, it does not specify sanitization for the project files it ingests for its own analysis.
Audit Metadata