nextjs-use-search-params-suspense
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for ingesting untrusted data from URL query parameters using the
useSearchParamshook. While this creates an entry point for external data into the application context, the skill uses standard React patterns that benefit from built-in rendering protections. The risk is inherent to the intended primary purpose of building search and filter interfaces. - Ingestion points:
useSearchParams()inSKILL.md(e.g.,SearchComponent,SearchResults,ProductList). - Boundary markers: None explicitly defined in the provided code snippets.
- Capability inventory: The snippets demonstrate UI rendering and client-side navigation via
router.push. - Sanitization: Standard React text rendering is used, which provides default protection against basic XSS, though specific application-level validation of query parameters is not shown.
Audit Metadata