next-cache-components-adoption
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Downloads and Dependencies: The skill utilizes
npxto execute official Next.js codemods (@next/codemod) and suggests installing a helper skill from the official Vercel repository on GitHub. These operations target trusted sources and are typical for managing framework migrations. - Command Execution: The skill performs standard development tasks using the
nextCLI (e.g.,next dev,next build) to validate the application's build status and identify blocking routes. It also uses utility commands likegrep,find, andnpxto automate code updates. - Indirect Prompt Injection Surface: The skill analyzes application source code, configuration files, and runtime error logs from the
next devoverlay to guide the user through the migration. While this involves processing external data, the skill uses this information to provide specific, technical guidance within the local development environment.
Audit Metadata