integrate-asset-delivery-with-transloadit-smartcdn-in-nextjs

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE] (SAFE): The skill utilizes environment variables for API credentials. It correctly identifies the secret key as a server-only variable and includes a specific warning to developers never to expose it to the browser.
  • [EXTERNAL_DOWNLOADS] (SAFE): The installation instructions reference the official '@transloadit/utils' package, which is necessary for the skill's functionality.
  • [DATA_EXFILTRATION] (SAFE): The server-side logic generates a signed URL and returns it to the client, but it does not return the 'TRANSLOADIT_SECRET' or other sensitive configuration details in the JSON response.
  • [COMMAND_EXECUTION] (SAFE): No dangerous shell commands or arbitrary code execution patterns were found.
  • [PROMPT_INJECTION] (SAFE): No malicious instructions intended to bypass AI safety filters or override agent behavior were detected in the documentation or code comments.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:41 PM