route-handler-design
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical resource for Next.js development. No patterns of malicious behavior, obfuscation, or unauthorized data access were identified.
- [EXTERNAL_DOWNLOADS]: The skill references industry-standard packages and services, including
next,@vercel/functions,stripe, andhono. These are appropriate for the documented subject matter. - [DATA_EXFILTRATION]: The instructions explicitly recommend using environment variables (
process.env.STRIPE_WEBHOOK_SECRET) for secret management and caution against exposing sensitive per-user data via static caching, demonstrating a security-conscious approach. - [INDIRECT_PROMPT_INJECTION]: While the skill guides the agent in processing user-provided code for review (an ingestion surface), it does not grant the agent dangerous capabilities or provide instructions that could lead to logic override when processing untrusted inputs.
Audit Metadata