nextjs-dynamic-routes-params
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for generating Next.js pages that fetch and render content based on user-controlled URL parameters.
- Ingestion points: Data enters the application context through dynamic route parameters (
params) and is subsequently used in API fetch requests inpage.tsxandroute.tsfiles. - Boundary markers: The skill does not implement or recommend boundary markers to distinguish between trusted and untrusted data segments in the generated code.
- Capability inventory: The skill utilizes
Write,Edit, andBashtools to create and modify executable application code. - Sanitization: Multiple code examples in the skill (Pattern 2: Blog Post and Real-World Examples: Documentation Site) use the
dangerouslySetInnerHTMLattribute to render API-fetched content. The skill lacks instructions for sanitizing this input, creating a Cross-Site Scripting (XSS) surface in the generated code.
Audit Metadata