middleware-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical guidance and best practices for Next.js development, focusing on the transition from middleware.ts to proxy.ts in version 16.
- [SAFE]: The documentation includes extensive analysis of past security vulnerabilities (such as CVE-2025-29927 and CVE-2026-44575) to educate the agent and users on the limitations of middleware as an authorization boundary.
- [SAFE]: Code snippets provided for features like Content Security Policy (CSP) nonces, locale routing, and A/B testing follow industry-standard implementation patterns.
- [SAFE]: External references are limited to trusted and well-known sources, including official Next.js/Vercel documentation, GitHub security advisories, and OWASP guides.
- [SAFE]: No indicators of prompt injection, obfuscation, persistence mechanisms, or unauthorized data access were found in the skill's instructions or metadata.
Audit Metadata