nextjs-validator

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Comprehensive analysis of the provided documentation and script reveals no malicious intent or security vulnerabilities.
  • [COMMAND_EXECUTION]: The skill uses a Python script (scripts/validate.py) to audit project configurations. The script's logic is confined to standard filesystem operations, using pathlib for file traversal and json for parsing local metadata. It does not utilize unsafe execution functions or spawn external shells.
  • [DATA_EXFILTRATION]: No network operations or external communication patterns were detected. The skill operates entirely within the local environment provided to the agent.
  • [PROMPT_INJECTION]: The instructions in SKILL.md provide technical constraints for enforcing specific Next.js development patterns. These do not attempt to override core agent safety filters or exfiltrate system context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 12:39 PM