nextjs
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with and edit local project files such as Next.js layouts, route handlers, and configurations. While this introduces a surface for indirect prompt injection if project files contain untrusted content, it is an expected part of the development workflow.
- Ingestion points: Project files (web/app/, layouts, route handlers, next.config.js).
- Boundary markers: None specified.
- Capability inventory: File editing and execution of local build commands.
- Sanitization: None specified.
- [COMMAND_EXECUTION]: Includes standard instructions for development tasks using
pnpm buildandpnpm devto manage the project lifecycle.
Audit Metadata