skills/openai/plugins/nextjs/Gen Agent Trust Hub

nextjs

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Command Execution]: The skill provides instructions for initializing projects using standard commands like npx create-next-app. These are conventional developer workflows for setting up a Next.js environment.
  • [External Resource References]: The documentation includes links to official Next.js resources and fetches configuration from well-known sources like GitHub and Vercel. These references are standard for developer documentation and do not introduce unusual risks.
  • [Security Guidance]: The skill contains a detailed section on security, highlighting critical CVEs (such as CVE-2025-66478 and CVE-2025-29927) and providing actionable advice on patching and upgrading dependencies to protect applications.
  • [Lazy Initialization Pattern]: It recommends a singleton pattern for database and SDK clients to prevent startup crashes during the build process, which is a recognized best practice for environment variable management in Next.js.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 05:55 AM
Security Audit — agent-trust-hub — nextjs