nextjs-locale-standalone

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides utility functions and templates for locale-aware routing using standard Next.js APIs. No unauthorized network requests or remote code execution patterns were found.
  • [SAFE]: Cookie management in the proxy logic follows security best practices. The NEXT_LOCALE cookie is configured with httpOnly: true, sameSite: 'lax', and the secure flag for HTTPS connections, effectively preventing client-side script access and mitigating CSRF risks.
  • [SAFE]: Input validation is robust. The logic in lib/i18n.ts ensures that locale strings extracted from URL paths or Accept-Language headers are strictly validated against a hardcoded list of supportedLanguages before being used in redirects or cookie values, preventing injection or path traversal attempts.
  • [SAFE]: The skill correctly handles browser-provided headers using a safe parsing logic for Accept-Language, including validation of weight (q-value) parameters to prevent potential parsing exploits.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 10:14 PM
Security Audit — agent-trust-hub — nextjs-locale-standalone