nextra-writer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of official Nextra, Next.js, and React packages from public registries.
- [COMMAND_EXECUTION]: The guide includes standard commands for project initialization, dependency management, and deployment using industry-standard tools like bun and vercel.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a documentation assistant that processes user-supplied technical details. 1. Ingestion points: Technical requirements and content descriptions provided by the user. 2. Boundary markers: MDX code blocks, frontmatter, and component delimiters. 3. Capability inventory: Generates and formats documentation files. 4. Sanitization: Relies on standard LLM output safety and markdown formatting.
Audit Metadata