The Agent Skills Directory

[DATA_EXPOSURE]: The skill correctly implements secret management by advising the use of environment variables and .env.local for local development. It specifically warns developers in the troubleshooting guide against using NEXT_PUBLIC_* prefixes for database credentials, which would expose them to the client-side browser.
[COMMAND_EXECUTION]: The guides recommend standard development commands such as npx create-next-app and npx prisma migrate, which are routine for the Next.js and Prisma ecosystem.
[DYNAMIC_EXECUTION]: Database interactions in the provided templates use safe patterns. The Prisma template uses tagged templates for raw queries ($queryRaw), which is the standard method for preventing SQL injection in that ORM.
[SAFE]: The skill includes 'server-only' markers in its database client helpers, ensuring that database logic cannot be accidentally imported into client-side components, thus preventing credential exposure and runtime errors.

tidbx-nextjs