nextjs-component-builder
Facilitates the creation of Next.js React components using BrandedFlow conventions, Tailwind CSS, and TypeScript for UI development.
Install this skill
or
82/100
Security score
The nextjs-component-builder skill was audited on May 14, 2026 and we found 6 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 50
Template literal with variable interpolation in command context
SourceSKILL.md
| 50 | fetch(`${process.env.NEXT_PUBLIC_API_URL}/endpoint`) |
medium line 3
Access to .env file
SourceSKILL.md
| 3 | description: Build Next.js React components following BrandedFlow conventions. Use process.env (not import.meta.env), Tailwind CSS, TypeScript. Use when building UI components for the Hub or client po |
medium line 16
Access to .env file
SourceSKILL.md
| 16 | - **Env vars**: Always `process.env.VAR_NAME` (never `import.meta.env`) |
low line 50
Access to .env file
SourceSKILL.md
| 50 | fetch(`${process.env.NEXT_PUBLIC_API_URL}/endpoint`) |
low line 74
Access to .env file
SourceSKILL.md
| 74 | const res = await fetch(process.env.HUB_API_URL + '/endpoint'); |
low line 21
External URL reference
SourceSKILL.md
| 21 | - **Hub API**: `https://brandedflow-hub-api.onrender.com` |
Scanned on May 14, 2026
View Security Dashboard