next-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for Next.js best practices, covering topics such as React Server Components (RSC), data fetching patterns, and image optimization. It does not contain any malicious code, obfuscation, or instructions to exfiltrate data.
- [COMMAND_EXECUTION]: The documentation includes standard development commands using
npxand thenextCLI for tasks like running codemods (@next/codemod), building the application, and using experimental bundle analysis tools. These are legitimate tools provided by the framework authors. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries and services such as Redis (
ioredis), AWS S3 (@aws-sdk/client-s3), and Google Analytics (@next/third-parties). These are typical dependencies for the described use cases such as caching and hosting. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill follows best practices by instructing the user to use environment variables for sensitive data.
Audit Metadata