nextjs
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation suggests configuration for an MCP server that fetches the
next-devtools-mcppackage from the npm registry. It also references using@next/codemodand@next/playwrightas part of the development and migration workflows.\n- [REMOTE_CODE_EXECUTION]: The recommended configuration for the Next.js devtools MCP server utilizesnpx -y next-devtools-mcp@latest, which downloads and executes the latest version of the tool from a remote registry at runtime. Similar patterns are suggested for migration tasks usingnpx @next/codemod@canary.\n- [COMMAND_EXECUTION]: The instructions require the execution of several CLI tools for core functionality, includingnext typegento generate route types,next buildandnext startfor production verification, andagent-browsercommands for runtime UI checks.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted project data which could be manipulated to influence the agent's behavior.\n - Ingestion points: Reads
next.config.js,package-lock.json, and the source code tree (e.g.,app/orsrc/app/) to determine optimization strategies.\n - Boundary markers: None identified; the instructions do not specify delimiters or sanitization for the project files being processed.\n
- Capability inventory: Includes listing MCP tools, fetching compilation logs, querying route metadata, and triggering builds.\n
- Sanitization: There is no mention of validating or sanitizing the content of project files before the agent incorporates them into its reasoning.
Audit Metadata