nextjs-api-file-upload
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill provides framework-specific best practices for Next.js development.
- [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted external files (CSV). While this creates a potential attack surface for indirect prompt injection if the data is processed by an LLM without sanitization, the skill is a legitimate development guide.
- Ingestion points: request.formData() in SKILL.md.
- Boundary markers: None present.
- Capability inventory: None.
- Sanitization: Not present.
Audit Metadata