nextjs

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with and edit local project files such as Next.js layouts, route handlers, and configurations. While this introduces a surface for indirect prompt injection if project files contain untrusted content, it is an expected part of the development workflow.
  • Ingestion points: Project files (web/app/, layouts, route handlers, next.config.js).
  • Boundary markers: None specified.
  • Capability inventory: File editing and execution of local build commands.
  • Sanitization: None specified.
  • [COMMAND_EXECUTION]: Includes standard instructions for development tasks using pnpm build and pnpm dev to manage the project lifecycle.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 11:52 PM
Security Audit — agent-trust-hub — nextjs