nextjs-lite-passwall

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a legitimate authentication mechanism for Next.js applications.
  • [COMMAND_EXECUTION]: Provides standard instructions for installing dependencies (bcryptjs, jose) and running a local script to generate password hashes. These are routine development tasks.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data access or transmission. The skill uses SESSION_SECRET and PASSWORD_HASH environment variables, which is the recommended practice for managing sensitive configuration.
  • [PROMPT_INJECTION]: The instructions focus entirely on implementation details and do not contain any patterns intended to bypass AI safety guidelines or override agent behavior.
  • [DYNAMIC_EXECUTION]: Uses jose for JWT verification and bcryptjs for password hashing, both of which are standard and safe for their intended purposes. No unsafe eval() or exec() calls are present.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 01:31 PM