next-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and instructional content aimed at assisting developers with Next.js best practices. All instructions align with official documentation and standard industry practices for web development.
- [EXTERNAL_DOWNLOADS]: The documentation references official Next.js packages and tools, such as @next/codemod for automated migrations and @next/third-parties for analytics integration. These are maintained by Vercel, a well-known organization, and represent standard tools within the ecosystem.
- [COMMAND_EXECUTION]: The skill includes examples of standard development commands, such as 'next build', 'npm run build', and 'npx' for executing migration codemods. These commands are intended for use in a local development environment for project maintenance and deployment.
- [DATA_EXPOSURE]: Documentation describes a development-only MCP (Model Context Protocol) endpoint (/_next/mcp) used for local debugging. This endpoint provides metadata about the local project (routes, errors, logs) to assist in AI-aided development, which is a standard feature for development environments.
Audit Metadata