nextjs-developer
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill contains documentation and code snippets typical of a software development assistant for the Next.js ecosystem.
- [EXTERNAL_DOWNLOADS]: The reference guides describe the installation of standard industry tools such as the Vercel CLI and bundle analysis packages from official registries. These are expected for the declared purpose of the skill.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users on how to handle sensitive information using environment variables and CI/CD secrets management, explicitly advising against committing sensitive credentials to source control.
- [COMMAND_EXECUTION]: The skill mentions common development commands such as
npm buildandvercel --prod, which are standard operations for deploying web applications and do not involve arbitrary or dangerous command execution.
Audit Metadata