nextjs-data-provider
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes robust security conventions for authentication token management, explicitly forbidding the storage of access tokens in
localStorageto mitigate XSS risks and recommendinghttpOnlycookies for refresh tokens. - [SAFE]: It includes specific guidelines for logging, mandating the masking of sensitive information such as passwords, emails, and API tokens, which prevents accidental data exposure in monitoring tools.
- [SAFE]: The conventions enforce the use of environment variables with proper scoping (
NEXT_PUBLIC_prefix rules) to ensure sensitive keys remain on the server and are not exposed to the client bundle. - [SAFE]: It integrates standard, well-known libraries for state and data management (such as TanStack Query, Zustand, nuqs, Axios, and Zod) following industry best practices for modern web development.
Audit Metadata