next
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Package Installation: The skill instructs the user to install several Node.js packages, specifically
@emulators/adapter-next,@emulators/github, and@emulators/google. These dependencies are core to the skill's functionality, allowing it to provide emulator support within a Next.js environment. - State Persistence Mechanisms: The skill documentation explains how to persist emulator state across restarts using either local file storage (
.emulate/state.json) or external services like Redis or Vercel KV. While persistence is a common development requirement, users should ensure that local state files containing sensitive test data are excluded from version control and that external stores are properly secured. - Tool Access Restriction: The skill defines a restricted scope for agent tools in its frontmatter, allowing only
npx emulate:*commands. This follows the principle of least privilege by limiting the agent's ability to execute arbitrary shell commands. - Data Processing Surface: By creating catch-all route handlers to serve emulator traffic (e.g.,
/emulate/github/**), the skill introduces a surface that processes external HTTP requests. This is the primary function of an emulator adapter, and the skill provides guidance on setting up OAuth and persistence within this flow.
Audit Metadata