analyze-bundle

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [Data Access]: The skill reads build artifacts from the .next/diagnostics/analyze/ndjson/ directory. This is a standard location for Next.js bundle analysis data and does not involve accessing sensitive user credentials or system-level configuration files.\n- [Command Execution]: The instructions utilize common development tools such as jq, grep, and node. These tools are used for the intended purpose of filtering and summarizing structured bundle data.\n- [Tooling Constraints]: The skill's configuration limits the available command-line tools to a specific set (node, head, tail, grep, jq), which is a security best practice that reduces the potential attack surface of the agent environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 07:36 PM