nextjs-validator
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the provided documentation and script reveals no malicious intent or security vulnerabilities.
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/validate.py) to audit project configurations. The script's logic is confined to standard filesystem operations, usingpathlibfor file traversal andjsonfor parsing local metadata. It does not utilize unsafe execution functions or spawn external shells. - [DATA_EXFILTRATION]: No network operations or external communication patterns were detected. The skill operates entirely within the local environment provided to the agent.
- [PROMPT_INJECTION]: The instructions in
SKILL.mdprovide technical constraints for enforcing specific Next.js development patterns. These do not attempt to override core agent safety filters or exfiltrate system context.
Audit Metadata