accelint-nextjs-best-practices

Pass

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: SAFE
Full Analysis
  • COMMAND_EXECUTION (SAFE): The provided shell scripts (check-server-actions-auth.sh, detect-barrel-imports.sh, find-waterfall-chains.sh) perform local file system scanning using standard Unix tools. They do not download or execute remote code, nor do they request elevated privileges.
  • DATA_EXFILTRATION (SAFE): Analysis of the scripts and documentation reveals no network calls to non-whitelisted domains or attempts to access sensitive file paths like SSH keys or environment secrets.
  • PROMPT_INJECTION (SAFE): The SKILL.md and related markdown files use standard instructional language for defining agent behavior and activation criteria. No adversarial patterns such as 'ignore previous instructions' or system prompt extraction were found.
  • OBFUSCATION (SAFE): No Base64, zero-width characters, homoglyphs, or other obfuscation techniques were identified within the skill files.
  • REMOTE_CODE_EXECUTION (SAFE): There are no patterns involving piped execution of remote content (e.g., curl|bash) or dynamic execution of untrusted input.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 18, 2026, 02:34 PM