next-best-practices
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of a series of markdown files that document standard and recommended practices for the Next.js framework. The guidance provided aligns with established web development patterns and official framework documentation.
- [EXTERNAL_DOWNLOADS]: The documentation references official and trusted packages such as
@next/codemodand@next/third-parties. These are maintained by Vercel, a well-known service in the ecosystem. Neutral mention of these tools for migration and integration is considered safe practice. - [COMMAND_EXECUTION]: The skill provides examples of standard development and build commands (e.g.,
npx @next/codemod,next build,npm ci). These commands are typical for the intended use case of project maintenance and deployment and do not include malicious payloads or unauthorized access patterns. - [CREDENTIALS_UNSAFE]: Code examples for self-hosting (e.g., Redis and S3 cache handlers) correctly use environment variables (e.g.,
process.env.REDIS_URL,process.env.AWS_REGION) for secret management. This is a security best practice and does not involve hardcoded credentials.
Audit Metadata