next-cache-components-adoption
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches official migration tools and documentation from Vercel's GitHub repositories and the Next.js website (e.g., nextjs.org).
- [COMMAND_EXECUTION]: The skill executes
npxto run Next.js codemods and utilizes shell commands likegrep,find,next dev, andnext buildto analyze the project structure and verify fixes. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local project's routes,
package.json, and build logs. It lacks explicit boundary markers when interpolating this data into its reasoning process, though the risk is minimal given its primary function as a project analysis tool. Ingestion points include theapp/directory and build outputs; capabilities include file modifications and package execution; no specific sanitization of route content is performed.
Audit Metadata