server-actions
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference and educational guide for Next.js Server Actions. It correctly identifies and documents critical security best practices such as input validation using Zod, authentication checks, and CSRF protection.
- [SAFE]: All code examples for data mutations (create, update, delete) demonstrate secure patterns, including verifying user session ownership and authorization before performing sensitive database operations.
- [SAFE]: The skill includes advanced patterns for form handling and cache revalidation that follow official Next.js architectural recommendations. No malicious behavior, prompt injection, or data exfiltration vectors were identified.
- [SAFE]: While a file upload example is provided, it includes basic validation for file type and size. Standard security warnings about sanitizing user-provided filenames are included in the security considerations section.
Audit Metadata