The Agent Skills Directory

[SAFE]: The skill is entirely educational and focuses on documenting Next.js framework best practices. No malicious code or suspicious patterns were found.
[EXTERNAL_DOWNLOADS]: All external references and package recommendations (e.g., @next/codemod, @next/third-parties) target official Next.js/Vercel repositories and documentation (nextjs.org), which are trusted and well-known services.
[COMMAND_EXECUTION]: The shell commands provided in the documentation (e.g., next build, npm run build, npx @next/codemod) are standard development utilities used for building and maintaining Next.js applications.
[DATA_EXPOSURE]: The skill demonstrates secure handling of sensitive information by using environment variables (process.env.DATABASE_URL) and clear placeholders (YOUR_API_KEY) instead of hardcoding credentials.
[INDIRECT_PROMPT_INJECTION]: While the skill describes patterns for ingesting untrusted data (such as URL searchParams and formData), it provides standard framework patterns for handling these inputs safely within the Next.js ecosystem.

next-best-practices