Security audit
Nextjs
Security checks for vulnerabilities and agentic risk
Overview
This is a simple instruction-only Next.js helper; its main risk is that it points to a broader external SkillBoss setup guide users should review separately.
Safe to install as an instruction-only Next.js helper. Review the linked SkillBoss setup guide separately before running any setup commands or providing API keys, and inspect generated Next.js code before executing or deploying it.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.