nextjs-developer

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If granted file-editing or deployment tools, the agent may change project code or deployment configuration as part of normal use.

Why it was flagged

The skill instructs the agent to make application changes and potentially deploy the application. This is expected for a Next.js developer skill, but deployment and code mutation can have real impact if the host agent has those tools.

Skill content
Implementation approach:
- Create app structure
- Implement routing
- Add server components
- Setup data fetching
- Optimize performance
- Write tests
- Handle errors
- Deploy application
Recommendation

Use normal code review and require explicit approval before production deployments, environment-variable changes, or other high-impact actions.

What this means

Project details could be shared with other specialized agents if the hosting environment supports that workflow.

Why it was flagged

The skill contemplates collaboration with other agents. This is purpose-aligned, but the supplied artifact does not define what project context is shared or how agent boundaries are enforced.

Skill content
Integration with other agents:
- Collaborate with react-specialist on React patterns
- Support fullstack-developer on full-stack features
- Work with typescript-pro on type safety
Recommendation

Confirm which agents can receive context and avoid sharing secrets, production credentials, or private customer data unless necessary and approved.