nextjs-pathname-id-fetch
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for processing untrusted URL parameters and interpolating them into network requests and UI rendering.
- Ingestion points: URL parameters accessed via the
paramsprop in dynamic route pages likeapp/[id]/page.tsx. - Boundary markers: None present in the provided implementation examples.
- Capability inventory: The skill uses the
fetchAPI to perform network operations based on the URL identifier and renders the resulting data in JSX. - Sanitization: No input validation or sanitization of the dynamic route segments is demonstrated before they are used to construct the API request URL.
Audit Metadata