next-cache-components-adoption

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text via the developer’s own Next.js app during next dev/next-dev-loop browsing—specifically the visited route’s real responses and any dev-overlay/terminal error messages (with /docs/messages/<slug> links) are generated while rendering attacker-controlled pages and inputs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to install and run a remote skill at runtime via the GitHub URL https://github.com/vercel/next.js/tree/canary/skills/next-dev-loop (npx skills add …), which fetches and executes external code as part of its verification loop.