nextjs-pages-router
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing and modifying Next.js source code files, which introduces a potential surface for indirect prompt injection if those files contain malicious instructions.\n
- Ingestion points: The skill is configured to trigger on and process content from
pages/**/*.tsxandpages/**/*.tsfiles.\n - Boundary markers: The instructions do not include specific delimiters or 'ignore' directives to help the agent distinguish project code from embedded adversarial instructions.\n
- Capability inventory: The skill workflow grants the agent the ability to read existing project code and write new files or modifications to implement Pages Router patterns.\n
- Sanitization: There are no explicit instructions provided to sanitize or validate content extracted from existing project files before it is processed or used in code generation.
Audit Metadata