nextjs

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The docs instruct running an unpinned npx-launched “MCP” agent that connects out and reports build/runtime logs, routes, and metadata — a development-time remote agent and unpinned package invocation that create clear supply-chain and data-exfiltration/backdoor risk.