new-page
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is to provide code templates for Next.js applications. Analysis of the instructions and code blocks confirms no attempts at data exfiltration, unauthorized command execution, or obfuscation.
- [PROMPT_INJECTION]: The skill incorporates external data through the $ARGUMENTS parameter to determine output file paths, representing an indirect prompt injection surface.
- Ingestion points: User input is received via the $ARGUMENTS variable in SKILL.md to define the route path.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands within the input are provided.
- Capability inventory: The skill utilizes Write, Read, and Glob tools as defined in the frontmatter.
- Sanitization: No explicit logic for path validation or input sanitization is included in the instructions.
Audit Metadata