moai-library-nextra
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The module
modules/framework-core-configuration.mdcontains instructional examples for build-time scripts usingexecSync. These scripts perform standard project maintenance tasks such as clearing build caches (rm -rf .next) and compressing output files. - [EXTERNAL_DOWNLOADS]: The documentation provides guides for initializing projects and deploying sites using official tools like
create-nextra-appvianpxand CLI tools for Vercel and Netlify. These represent standard, trusted dependencies within the frontend ecosystem. - [PROMPT_INJECTION]: The skill documents an architecture for full-text search (
modules/advanced-patterns.md) that processes local content files. - Ingestion points: The system ingests data by scanning the
pagesdirectory and reading MDX files usingfs.readFileto build a search index. - Boundary markers: No specific boundary delimiters are defined in the indexing logic to differentiate between documentation text and potential embedded instructions.
- Capability inventory: The framework environment includes capabilities for file system access and shell execution as part of the build process.
- Sanitization: The logic includes an
extractFromMDXhelper that provides basic sanitization by stripping code blocks and HTML tags before content is added to the search index.
Audit Metadata