web-frameworks
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a developer resource for scaffolding and documenting Next.js and Turborepo projects. The instructions and scripts align perfectly with the stated purpose.
- [COMMAND_EXECUTION]: The
nextjs_init.pyandturborepo_migrate.pyscripts perform legitimate file and directory operations (creating folders, writing configuration files likepackage.jsonandturbo.json). These are standard scaffolding actions and do not involve arbitrary command execution or unsafe shell spawning. - [EXTERNAL_DOWNLOADS]: The documentation guides the user to use standard tools like
npx create-next-appandnpx create-turbo. These tools interact with official registries (npm) and are developed by well-known organizations (Vercel). No untrusted or suspicious remote sources are used. - [DATA_EXPOSURE]: The skill promotes security best practices by automatically including sensitive files (like
.env.local) in the generated.gitignoreand identifying them as global dependencies in Turborepo to ensure they are handled correctly by the build system.
Audit Metadata