next-partial-prefetching-adoption
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Official Vendor Tooling: The skill facilitates the installation of official developer utilities and executes specific code transformation tools from the framework vendor.- Evidence: The skill uses
npx skills add https://github.com/vercel/next.js/tree/canary/skills/next-dev-loopandnpx @next/codemod@latest(SKILL.md).- Context: These resources are owned by the official vendor and are standard for modern development workflows involving Next.js.- Source Code Analysis Surface: The skill identifies code patterns within the user's project to determine which components require migration.- Ingestion points: Local source files (.tsx,.jsx) are scanned using thergcommand (SKILL.md).- Boundary markers: The instructions do not specify explicit delimiters or markers to differentiate between intended code and potential embedded instructions in the analyzed files.- Capability inventory: The skill possesses the capability to execute shell commands (npx,rg) and perform file-system modifications (SKILL.md).- Sanitization: Code content retrieved during the audit is processed without specific sanitization steps before being interpreted for adoption logic.- Command Execution for Auditing: The skill employs standard search utilities to perform a tree-wide audit of navigation components.- Evidence: Usage ofrg -n '\bprefetch\b|router\.prefetch' -g '*.tsx' -g '*.jsx' .(SKILL.md).- Context: This usage is restricted to local directory searching to help the user identify relevant code segments for manual or automated refactoring.
Audit Metadata