next-cache-components-optimizer

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Command Execution]: The skill manages an optimization loop that involves executing standard framework commands such as next build, next start, and playwright test. These operations are central to the skill's purpose of verifying performance improvements in a production-like environment.
  • [External Resource Integration]: The workflow refers to official Next.js documentation and utilizes npx to run framework upgrade scripts. These resources originate from trusted organizations and official registries, aligning with secure development practices.
  • [Indirect Prompt Injection Surface]: The skill ingests data from local repository files, including package.json, next.config.ts, and Playwright configurations, to adapt its optimization logic to the project's environment.
  • Ingestion points: Project configuration files and repository file structures (e.g., SKILL.md, rig-template.md).
  • Boundary markers: Not explicitly defined; the skill processes these files as standard structured data or configuration inputs.
  • Capability inventory: The skill utilizes file system access, shell command execution for builds/tests, and network access for package management.
  • Sanitization: The skill relies on standard framework parsing of configuration files without additional sanitization layers described in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 06:50 PM
Security Audit — agent-trust-hub — next-cache-components-optimizer