moai-library-nextra

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The module modules/framework-core-configuration.md contains instructional examples for build-time scripts using execSync. These scripts perform standard project maintenance tasks such as clearing build caches (rm -rf .next) and compressing output files.
  • [EXTERNAL_DOWNLOADS]: The documentation provides guides for initializing projects and deploying sites using official tools like create-nextra-app via npx and CLI tools for Vercel and Netlify. These represent standard, trusted dependencies within the frontend ecosystem.
  • [PROMPT_INJECTION]: The skill documents an architecture for full-text search (modules/advanced-patterns.md) that processes local content files.
  • Ingestion points: The system ingests data by scanning the pages directory and reading MDX files using fs.readFile to build a search index.
  • Boundary markers: No specific boundary delimiters are defined in the indexing logic to differentiate between documentation text and potential embedded instructions.
  • Capability inventory: The framework environment includes capabilities for file system access and shell execution as part of the build process.
  • Sanitization: The logic includes an extractFromMDX helper that provides basic sanitization by stripping code blocks and HTML tags before content is added to the search index.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 07:24 PM