nextjs-lite-passwall
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a legitimate authentication mechanism for Next.js applications.
- [COMMAND_EXECUTION]: Provides standard instructions for installing dependencies (
bcryptjs,jose) and running a local script to generate password hashes. These are routine development tasks. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or transmission. The skill uses
SESSION_SECRETandPASSWORD_HASHenvironment variables, which is the recommended practice for managing sensitive configuration. - [PROMPT_INJECTION]: The instructions focus entirely on implementation details and do not contain any patterns intended to bypass AI safety guidelines or override agent behavior.
- [DYNAMIC_EXECUTION]: Uses
josefor JWT verification andbcryptjsfor password hashing, both of which are standard and safe for their intended purposes. No unsafeeval()orexec()calls are present.
Audit Metadata