nextjs
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution]: The skill provides instructions for initializing projects using standard commands like
npx create-next-app. These are conventional developer workflows for setting up a Next.js environment. - [External Resource References]: The documentation includes links to official Next.js resources and fetches configuration from well-known sources like GitHub and Vercel. These references are standard for developer documentation and do not introduce unusual risks.
- [Security Guidance]: The skill contains a detailed section on security, highlighting critical CVEs (such as CVE-2025-66478 and CVE-2025-29927) and providing actionable advice on patching and upgrading dependencies to protect applications.
- [Lazy Initialization Pattern]: It recommends a singleton pattern for database and SDK clients to prevent startup crashes during the build process, which is a recognized best practice for environment variable management in Next.js.
Audit Metadata