nextjs-api-routes
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: This skill serves as a documentation and pattern library for developers, providing secure and standard coding templates for Next.js 15 API routes.
- [CREDENTIALS_UNSAFE]: The code examples correctly reference environment variables (e.g.,
CRON_SECRET,NEXT_PUBLIC_SUPABASE_URL) for secret management rather than using hardcoded credentials. - [INDIRECT_PROMPT_INJECTION]: The skill provides robust patterns for handling external input from API requests, including templates for input validation, tenant-scoping (filtering by
newsletter_id), and error handling to manage untrusted data safely. - [EXTERNAL_DOWNLOADS]: References to external libraries like
@supabase/ssrinvolve well-known, trusted packages for authentication and database management.
Audit Metadata