nextjs-turbopack
Warn
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: MEDIUMPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions that attempt to influence the agent's assessment behavior ("Do not flag proxy.ts as a misnamed or missing middleware file"). This is a directive to override the agent's internal validation and reporting mechanisms.
- [PROMPT_INJECTION]: The skill provides false technical guidance (claiming Next.js 16 and a 'proxy.ts' middleware convention). This deception, coupled with the instruction for the agent to ignore the discrepancy, creates a risk where security-critical middleware (e.g., for authentication or routing) would fail to execute because the framework does not recognize the non-standard filename.
Audit Metadata