sb-nextjs
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The instructions focus on establishing development standards and security guardrails for Next.js projects. Findings include recommendations for:
- Security Headers: Explicit instructions to implement Content-Security-Policy (with nonces), HSTS, X-Frame-Options, and Permissions-Policy.
- Input Validation: Recommends using Zod to validate dynamic route parameters and environment variables, treating them as untrusted input.
- Data Privacy: Provides clear rules for environment variables, ensuring sensitive data remains on the server and is not exposed via
NEXT_PUBLIC_*prefixes. - Code Integrity: Encourages the use of standard Next.js conventions and built-in components (
next/image,next/font) over less secure alternatives.
Audit Metadata