nextjs
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill contains standard documentation and code snippets for the Next.js framework, including server-side rendering (SSR), API routes, and Server Actions. It follows established development patterns without introducing malicious behavior or unsafe configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a risk surface for indirect prompt injection common to web applications that process untrusted data.
- Ingestion points: External API responses in
getServerSidePropsand user-submitted form data in thecreateUserServer Action (found inSKILL.md). - Boundary markers: None present in the illustrative code snippets.
- Capability inventory: The skill demonstrates network communication (
fetch) and simulated backend data operations. - Sanitization: No explicit input sanitization or validation logic is detailed in the brief educational examples.
Audit Metadata