solid-nextjs
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
grepandnpx jscpdto search for existing patterns and identify code duplication within the project. These tools are used strictly for codebase analysis in a manner consistent with the skill's stated purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external documentation and the local codebase to provide architectural recommendations.\n - Ingestion points: Codebase files and external documentation results from Context7/Exa.\n
- Boundary markers: No specific delimiters or warnings are used to isolate ingested data from instructions.\n
- Capability inventory: Includes shell command execution (grep, npx) and sub-agent spawning.\n
- Sanitization: No explicit sanitization of research or codebase data is described.\n- [EXTERNAL_DOWNLOADS]: Reference templates include integration patterns for well-known services such as SendGrid and Stripe. These are provided as boilerplate for development and do not execute untrusted remote code.
Audit Metadata