nextstep-tours

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and implementation examples for building UI walkthroughs in Next.js. A thorough review of all instructions, scripts, and configuration assets (including the validation registry and custom card components) revealed no evidence of prompt injection, data exfiltration, or malicious commands.
  • [SAFE]: Network activity is restricted to local API routes (e.g., /api/projects) used for validating user progression in tutorials and standard analytics tracking callbacks, which are appropriate for the skill's stated purpose.
  • [SAFE]: The skill follows secure development practices by recommending the storage of tutorial state in localStorage and providing clear instructions for handling z-index conflicts and SSR/hydration issues in a standard web environment.
  • [SAFE]: The dependencies identified (nextstepjs and motion) are well-known libraries for building tour interfaces and animations in React environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:30 PM