scaffold-nextjs-app

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute npx create-next-app@latest, mkdir, and npm run dev. These are standard commands for initializing and running a Next.js development environment.
  • [EXTERNAL_DOWNLOADS]: Uses npx to fetch the create-next-app scaffolding tool from the official npm registry. This is a well-known service and the standard method for starting Next.js projects.
  • [DATA_EXPOSURE]: No access to sensitive files or exfiltration attempts were detected. The project configuration examples use placeholder values like 'example.com'.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 10:51 PM