nextjs-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several official Next.js codemods and utility packages (e.g.,
@next/codemod,@next/third-parties). These are hosted on the official NPM registry and belong to Vercel, a well-known and trusted organization in the web development ecosystem. The use of these resources is standard for Next.js development and migration tasks. - [COMMAND_EXECUTION]: The documentation provides examples of standard CLI commands for the Next.js development environment, such as
npx @next/codemod,next build, andnext experimental-analyze. These are intended for developer use and do not involve arbitrary or malicious command execution. - [DATA_EXPOSURE]: The guides demonstrate best practices for secret management, such as using environment variables (
process.env.REDIS_URL) for sensitive configuration in self-hosting scenarios. This aligns with industry-standard security practices for preventing credential leaks. - [SAFE]: The skill is primarily instructional, offering architectural patterns and code examples (e.g., React Server Components, Suspense boundaries, and Route Handlers) that are well-documented and follow official Next.js guidelines. No signs of prompt injection, persistence mechanisms, or privilege escalation attempts were found.
Audit Metadata