ce-nextjs-patterns
Warn
Audited by Socket on Mar 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill/documentation describes expected patterns for integrating a storefront SDK with Next.js. I found no evidence of malicious code, remote execution chains, or credential harvesting to third-party domains. The main risks are standard supply-chain considerations from installing an npm package (verify package provenance) and the potential misuse of NEXT_PUBLIC_API_KEY (public exposure if a private key is placed there). Overall the content is coherent with its stated purpose and does not contain indicators of malicious behavior.
Confidence: 75%Severity: 75%
Audit Metadata