nextstep-tours
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation examples for building UI walkthroughs in Next.js. A thorough review of all instructions, scripts, and configuration assets (including the validation registry and custom card components) revealed no evidence of prompt injection, data exfiltration, or malicious commands.
- [SAFE]: Network activity is restricted to local API routes (e.g.,
/api/projects) used for validating user progression in tutorials and standard analytics tracking callbacks, which are appropriate for the skill's stated purpose. - [SAFE]: The skill follows secure development practices by recommending the storage of tutorial state in
localStorageand providing clear instructions for handling z-index conflicts and SSR/hydration issues in a standard web environment. - [SAFE]: The dependencies identified (
nextstepjsandmotion) are well-known libraries for building tour interfaces and animations in React environments.
Audit Metadata