implement-saaskit-nextjs
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled input via the
nextURL parameter to determine post-authentication redirect destinations. This represents a potential surface for Open Redirect attacks if not handled correctly. - Ingestion points: URL search parameters in
app/auth/login/route.tsandapp/auth/callback/route.ts(SKILL.md). - Boundary markers: The skill explicitly mandates that the agent must treat the redirect path as relative only.
- Capability inventory: The skill uses
NextResponse.redirectto perform navigations based on this input. - Sanitization: The provided code examples include validation logic to ensure the path starts with a single
/and prevents protocol-relative (//) or absolute URL redirects. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the
@scalekit-sdk/nodepackage. This is the official SDK for the service described in the skill and is maintained by the skill's author.
Audit Metadata