Next.js Security & Privacy Skill

This skill defines best practices and security patterns for building secure, privacy-compliant, and production-ready Next.js applications.

The goal is to minimize vulnerabilities, protect user data, and ensure compliance with modern security standards (OWASP, GDPR, etc.).

This includes application security, API protection, authentication flows, input validation, data privacy, and cryptographic verification.

When to use this skill

• When building or modifying API routes
• When implementing authentication or authorization systems
• When handling user input or file uploads
• When managing secrets or environment variables
• When building payment or sensitive features
• When processing personal data (especially EU users / GDPR)
• When integrating external services or third-party APIs
• When performing a security audit or pre-deployment review
• When integrating blockchain or wallet-based authentication