next-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, consisting of Markdown documentation and code examples that follow industry-standard best practices for Next.js applications.
- [SAFE]: Data handling examples, such as those in the self-hosting guide, correctly utilize environment variables for sensitive configurations like database URLs and cloud credentials, avoiding hardcoded secrets.
- [SAFE]: External dependencies and tools referenced (e.g.,
@next/codemod,@next/third-parties,@aws-sdk/client-s3,ioredis) are well-known, official, or standard libraries within the JavaScript and Next.js ecosystems. - [SAFE]: Development-specific tools like the MCP (Model Context Protocol) endpoint described in the debug tricks are intended for local development environments to assist with AI-driven debugging and do not pose a remote security threat in this context.
Audit Metadata