next-bundle-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External skill installation: The skill recommends adding helper tools such as
next-cache-components-optimizerandnext-dev-loopfrom the official Next.js repository. These resources are hosted by a trusted organization and are intended to extend the optimization workflow. - Local command execution: The workflow involves running build and analysis commands via
pnpmandnext. These are standard operations for bundle auditing and are executed within the user's project context. - Data processing considerations: The skill interprets application metadata and bundle analysis artifacts in JSONL format. This processing follows a defined schema from the installed Next.js package, which helps ensure the integrity of the performance data being analyzed.
Audit Metadata