Next.js Production Engineering

PassAudited by ClawScan on May 1, 2026.

Overview

The provided artifacts show an instruction-only Next.js engineering guide with no executable install code, credential requirements, or hidden automation.

This appears safe to install as an instruction-only Next.js guide. Before letting an agent apply its advice, review generated code, deployment commands, CI/CD changes, authentication logic, and secrets handling.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent is connected to development or deployment tools, following this guidance could change a real application or deployment pipeline.

Why it was flagged

The skill may guide production deployment or CI/CD changes. That is expected for the stated purpose, but users should still review any generated commands or configuration before applying them.

Skill content
"Deploy to production with Docker"
Recommendation

Keep production deployments user-approved, inspect generated Docker and CI/CD configuration, and verify rollback, secrets handling, and environment targeting before execution.