nextjs-ppr-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill's debugging playbook in
references/_debug-boundaries.mdinstructs the agent to fetch and analyze raw HTML and hydrated DOM content from the application under test (e.g.,https://app.local/dashboard) usingcurlandmcporter. This external content is ingested into the agent's context without sanitization or boundary markers (such as "ignore embedded instructions" warnings). A malicious or compromised application could potentially influence agent behavior by embedding instructions within the HTML tags or text.\n - Ingestion points:
curloutput andmcporter.evaluate_scriptresults (found inreferences/_debug-boundaries.md).\n - Boundary markers: Absent.\n
- Capability inventory: Shell access (
curl,next build,diff) and browser automation (mcporter).\n - Sanitization: Absent.\n- [EXTERNAL_DOWNLOADS]: The skill references and instructs the agent to use configuration files and related skills from an external GitHub repository (
github.com/steipete/agent-scripts) which is not associated with the skill author or a trusted organization. Specifically, it points tomcporter-config.mdfor setup of the browser debugging tools.\n- [COMMAND_EXECUTION]: The debugging instructions inreferences/_debug-boundaries.mdprovide several shell commands for the agent to execute, includingnext build,curl, andmcportertool calls. These commands are intended to inspect the build output and the rendered state of the application for debugging purposes.
Audit Metadata