nextjs-security
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is an educational and procedural guide for conducting security reviews of Next.js applications. It identifies specific architectural risks and provides mitigation strategies for developers and auditors.
- [EXTERNAL_DOWNLOADS]: The skill provides references to official documentation and security advisories from well-known and trusted sources, including the official Next.js blog, Vercel's GitHub security advisories, and the Mozilla Developer Network. These references are provided for context and verification.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted project files and pull request data. This ingestion constitutes an attack surface typical of auditing tools, but the skill mitigates this through a structured seven-phase approach and explicit verification loops.
Audit Metadata