scaffolding-nextjs-foundation

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx to initialize the project structure (Next.js and Shadcn UI) and npm install to manage project dependencies. These are standard and expected commands for web development workflows.
  • [EXTERNAL_DOWNLOADS]: The skill installs established libraries such as next-auth, mongodb, zod, and bcrypt from the official NPM registry. These packages are industry standards for authentication, database connectivity, and data validation.
  • [SAFE]: The instructions provide sound architectural advice, such as using .env.local for secrets and configuring local database connections. It correctly implements modernization steps without introducing dangerous shell patterns or privilege escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 07:34 AM
Security Audit — agent-trust-hub — scaffolding-nextjs-foundation