stack-nextjs-fullstack
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes security best practices by implementing 'Three-Layer Auth', which ensures authentication is verified at the middleware, server component, and server action levels, providing defense-in-depth against unauthorized access.
- [SAFE]: Explicit guidance is provided on secure environment variable management, specifically instructing that secrets must only be accessed in server-side code and must not use the
NEXT_PUBLIC_prefix which exposes them to the client. - [SAFE]: No instances of prompt injection, obfuscation, or data exfiltration attempts were found. The integration patterns provided are standard for modern full-stack development.
- [SAFE]: The skill does not perform any external network requests, file system modifications outside the project scope, or execution of untrusted remote code.
Audit Metadata