next-best-practices

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of markdown documentation providing best practices for Next.js applications. No executable code or malicious patterns were identified.\n- [EXTERNAL_DOWNLOADS]: The documentation references standard developer tools and packages such as @next/codemod, @next/third-parties, and @opennextjs/aws. These are well-known ecosystem tools and their inclusion in documentation for migration and deployment is standard practice.\n- [COMMAND_EXECUTION]: The skill includes examples of common development commands (e.g., npm run build, next build, pm2 start). These are provided as instructional snippets for project maintenance and deployment and do not contain malicious payload injection.\n- [METADATA_POISONING]: The skill mentions forward-looking features and conventions for Next.js 15 and 16 (e.g., proxy.ts and MCP debugging endpoints). While Next.js 16 is not yet released, providing speculative or version-specific documentation in a best-practices guide is not inherently malicious and does not appear to be an attempt to deceive or exploit the agent environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 09:28 PM