nextjs-data-fetching
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate educational content and code patterns for Next.js development with no evidence of malicious behavior, obfuscation, or unauthorized access.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of reputable, standard Node.js packages (swr, @tanstack/react-query, and zod) from the official NPM registry, which is standard practice for the described use case.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates data ingestion patterns through external API calls and form submissions, which are handled using standard web development techniques. * Ingestion points: Remote data fetched via fetch() and user-provided input through formData in Server Actions. * Boundary markers: No specific delimiters or safety instructions are provided to the agent regarding the processing of this data. * Capability inventory: The skill allows access to Read, Write, Edit, and Bash tools. * Sanitization: The code examples include the use of the zod library for schema validation and data sanitization, which helps mitigate injection risks.
Audit Metadata