nextjs-tinacms
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of project-specific shell commands through
npx,pnpm, andnpmfor tasks such as starting development servers (tinacms dev), running builds, and managing UI components via theshadcnCLI. - [EXTERNAL_DOWNLOADS]: Fetches necessary dependencies and CLI tools from the NPM registry, including official packages from trusted and well-known organizations such as Vercel, Upstash, and Anthropic.
- [PROMPT_INJECTION]: Includes specific operational hooks intended for the agent to prevent the manual editing of auto-generated files like
tina-lock.jsonand those within thetina/__generated__/directory, ensuring project consistency and build integrity. - [REMOTE_CODE_EXECUTION]: Uses
npxto execute remote packages for project initialization and migration tasks, such as the@next/codemodutility, which is a standard practice for modern web development environments.
Audit Metadata