security-nextjs

What problem does it solve?

This Skill helps identify and mitigate common security vulnerabilities in Next.js applications, protecting against data leaks, unauthorized access, and other risks.

Core Features & Use Cases

• Environment Variable Auditing: Detects exposed secrets via NEXT_PUBLIC_ prefixes and next.config.js env settings.
• Server Action & API Route Security: Checks for missing authentication and authorization.
• Middleware Configuration: Reviews middleware.ts for proper route matching and auth enforcement.
• Use Case: Before deploying a new Next.js feature, run this Skill to automatically scan for common security misconfigurations like accidentally exposing API keys to the client.

Quick Start

Run the security-nextjs skill to scan the current directory for Next.js security vulnerabilities.