analyze-bundle
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [Data Access]: The skill reads build artifacts from the
.next/diagnostics/analyze/ndjson/directory. This is a standard location for Next.js bundle analysis data and does not involve accessing sensitive user credentials or system-level configuration files.\n- [Command Execution]: The instructions utilize common development tools such asjq,grep, andnode. These tools are used for the intended purpose of filtering and summarizing structured bundle data.\n- [Tooling Constraints]: The skill's configuration limits the available command-line tools to a specific set (node,head,tail,grep,jq), which is a security best practice that reduces the potential attack surface of the agent environment.
Audit Metadata