next-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references fetching and executing official migration codemods from the Vercel registry via
npx @next/codemod@latest.- [COMMAND_EXECUTION]: Provides numerous educational examples for shell commands required to build, deploy, and monitor Next.js applications, including usage ofnext build,npm ci,pm2, and health check tests withwgetandcurl.- [INDIRECT_PROMPT_INJECTION]: The skill documents the use of a development server MCP endpoint to retrieve project metadata, routes, and logs. This represents an ingestion surface where data from the application under development (such as runtime errors or log entries) is incorporated into the agent's context for diagnostic purposes.
Audit Metadata