Skip to main content

nextjs-patterns

Provides patterns for building Next.js 15 applications, including frontend pages, API routes, and server/client components.

Install this skill

or
81/100

Security score

The nextjs-patterns skill was audited on Feb 12, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 86

Template literal with variable interpolation in command context

SourceSKILL.md
86await fetch(`/api/environments/${id}`, { method: 'DELETE' })
medium line 327

Template literal with variable interpolation in command context

SourceSKILL.md
327const res = await fetch(`${API_URL}/api/v1/environments`, {
medium line 339

Template literal with variable interpolation in command context

SourceSKILL.md
339const res = await fetch(`${API_URL}/api/v1/environments/${id}`, {
low line 221

Access to .env file

SourceSKILL.md
221clientId: process.env.GOOGLE_CLIENT_ID!,
low line 222

Access to .env file

SourceSKILL.md
222clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
low line 324

Access to .env file

SourceSKILL.md
324const API_URL = process.env.FACADE_URL || 'http://localhost:1337'
low line 324

External URL reference

SourceSKILL.md
324const API_URL = process.env.FACADE_URL || 'http://localhost:1337'
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →