web-frameworks

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a developer resource for scaffolding and documenting Next.js and Turborepo projects. The instructions and scripts align perfectly with the stated purpose.
  • [COMMAND_EXECUTION]: The nextjs_init.py and turborepo_migrate.py scripts perform legitimate file and directory operations (creating folders, writing configuration files like package.json and turbo.json). These are standard scaffolding actions and do not involve arbitrary command execution or unsafe shell spawning.
  • [EXTERNAL_DOWNLOADS]: The documentation guides the user to use standard tools like npx create-next-app and npx create-turbo. These tools interact with official registries (npm) and are developed by well-known organizations (Vercel). No untrusted or suspicious remote sources are used.
  • [DATA_EXPOSURE]: The skill promotes security best practices by automatically including sensitive files (like .env.local) in the generated .gitignore and identifying them as global dependencies in Turborepo to ensure they are handled correctly by the build system.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 01:36 AM
Security Audit — agent-trust-hub — web-frameworks