nextjs-locale-standalone
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides utility functions and templates for locale-aware routing using standard Next.js APIs. No unauthorized network requests or remote code execution patterns were found.
- [SAFE]: Cookie management in the proxy logic follows security best practices. The
NEXT_LOCALEcookie is configured withhttpOnly: true,sameSite: 'lax', and thesecureflag for HTTPS connections, effectively preventing client-side script access and mitigating CSRF risks. - [SAFE]: Input validation is robust. The logic in
lib/i18n.tsensures that locale strings extracted from URL paths orAccept-Languageheaders are strictly validated against a hardcoded list ofsupportedLanguagesbefore being used in redirects or cookie values, preventing injection or path traversal attempts. - [SAFE]: The skill correctly handles browser-provided headers using a safe parsing logic for
Accept-Language, including validation of weight (q-value) parameters to prevent potential parsing exploits.
Audit Metadata