nextjs-server-components
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for standard Next.js App Router architecture and React Server Component patterns.\n- [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install
server-only, a standard utility used in Next.js development to enforce server-side execution boundaries and prevent credential leakage.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a vulnerability surface related to processing application code and database data.\n - Ingestion points: Project source files specified in triggers (
app/**/*.tsx,src/app/**/*.tsx).\n - Boundary markers: Use of
'use client'to delimit interactive code andserver-onlyto isolate sensitive logic.\n - Capability inventory: Ability to read project files and suggest code changes for data fetching.\n
- Sanitization: Best practices are explicitly recommended, such as prop serialization (filtering functions/Classes) and minimizing database object exposure when passing data to the client.
Audit Metadata