next-dev-loop
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [External Tooling Integration]: The skill includes instructions to install
agent-browserand manage Next.js versions. These tools are standard for the described development workflow and are sourced from established registries. - [Browser Session Persistence]: The skill utilizes session identifiers and restore flags to maintain browser state across executions. This approach is a standard functional requirement for automated testing of authenticated applications.
- [Runtime Data Ingestion]: The skill ingests data from a live development server and browser instance to verify application behavior. While this represents a surface for indirect prompt injection from the code under test, the skill incorporates safety measures such as requiring user confirmation for authentication steps.
- [System Command Usage]: The skill employs shell commands to interact with the build system and browser tools. These operations are focused on the local development environment and are consistent with the skill's stated purpose.
Audit Metadata