next-partial-prefetching-adoption

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Official Vendor Tooling: The skill facilitates the installation of official developer utilities and executes specific code transformation tools from the framework vendor.- Evidence: The skill uses npx skills add https://github.com/vercel/next.js/tree/canary/skills/next-dev-loop and npx @next/codemod@latest (SKILL.md).- Context: These resources are owned by the official vendor and are standard for modern development workflows involving Next.js.- Source Code Analysis Surface: The skill identifies code patterns within the user's project to determine which components require migration.- Ingestion points: Local source files (.tsx, .jsx) are scanned using the rg command (SKILL.md).- Boundary markers: The instructions do not specify explicit delimiters or markers to differentiate between intended code and potential embedded instructions in the analyzed files.- Capability inventory: The skill possesses the capability to execute shell commands (npx, rg) and perform file-system modifications (SKILL.md).- Sanitization: Code content retrieved during the audit is processed without specific sanitization steps before being interpreted for adoption logic.- Command Execution for Auditing: The skill employs standard search utilities to perform a tree-wide audit of navigation components.- Evidence: Usage of rg -n '\bprefetch\b|router\.prefetch' -g '*.tsx' -g '*.jsx' . (SKILL.md).- Context: This usage is restricted to local directory searching to help the user identify relevant code segments for manual or automated refactoring.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 07:14 AM
Security Audit — agent-trust-hub — next-partial-prefetching-adoption