nextjs-tinacms
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard architectural patterns and implementation guides for Next.js, React, and TinaCMS. No obfuscation, data exfiltration, or malicious persistence mechanisms were found.
- [EXTERNAL_DOWNLOADS]: The skill correctly references official packages and tools from trusted vendors such as TinaCMS, Vercel, and Anthropic. It utilizes standard package managers (npx, pnpm) to fetch verified dependencies.
- [COMMAND_EXECUTION]: All documented shell commands (e.g.,
tinacms build,next dev) are standard operations for the web stack being described and are necessary for the skill's intended development purpose. - [CREDENTIALS_UNSAFE]: The skill follows secure secret management practices by instructing users to use environment variables for sensitive tokens (TINA_TOKEN, GITHUB_TOKEN). No hardcoded credentials or secrets were identified in the source files.
- [PROMPT_INJECTION]: The instructions focus entirely on technical setup and do not attempt to manipulate agent behavior or bypass safety constraints.
Audit Metadata