nextjs-pages-to-app
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely educational, providing architectural guidance and code snippets for Next.js developers. It contains no executable scripts or platform commands.
- [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety filters were found in the instructions or metadata.
- [DATA_EXFILTRATION]: No hardcoded credentials, sensitive file path access, or network exfiltration patterns are present. The URLs used in examples (e.g., example.com) are standard placeholders.
- [OBFUSCATION]: The content is clear and uses no encoding (Base64, hex), hidden characters, or homoglyphs to conceal information.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute any external scripts or packages.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies common data-fetching patterns (e.g., fetching from
api.example.com). While these define a potential attack surface in the target application, the skill itself does not process external untrusted data within the agent's execution environment. - Ingestion points: None (documentation only).
- Boundary markers: Not applicable.
- Capability inventory: None.
- Sanitization: Not applicable.
Audit Metadata