tracekit-nextjs-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill guides the user through the standard setup process for the vendor's SDK, including package installation from the official registry (
@tracekit/nextjs). - [SAFE]: Instructions correctly emphasize security best practices by mandating the use of
.env.localfor API keys and explicitly warning against hardcoding credentials. - [SAFE]: External references and network operations target the vendor's established domains (
tracekit.dev). - [SAFE]: The logic for checking authentication via local configuration files (
~/.tracekitconfig) and helper scripts is consistent with the intended purpose of managing developer tool credentials. - [SAFE]: The instruction to avoid manually prompting the user for sign-up is a workflow optimization favoring automated authentication flows, rather than an attempt to conceal malicious activity.
Audit Metadata