pdp
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation from well-known services, such as nextjs.org and react.dev, providing guidance on caching and server actions.
- [COMMAND_EXECUTION]: The instructions include standard development commands like pnpm run generate and pnpm test for local environment management, as well as an example curl command for triggering local API revalidation.
- [PROMPT_INJECTION]: The described architecture handles data from GraphQL queries and URL search parameters, which represents a standard attack surface for indirect prompt injection in web applications. Ingestion points: Product data from GraphQL and variant selection from searchParams in page.tsx. Boundary markers: Data flow is managed via standard Next.js Server Components and client-side Suspense boundaries. Capability inventory: The architecture utilizes Server Actions for cart management and revalidation paths. Sanitization: While the skill assumes standard implementation-level validation, specific sanitization logic for ingested data is not detailed in the architectural overview.
Audit Metadata