Skip to main content

nextjs-frontend-skill

Guides users in building Next.js applications with TypeScript and Tailwind CSS, focusing on responsive design and component creation.

Install this skill

or
63/100

Security score

The nextjs-frontend-skill skill was audited on Feb 28, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 137

Template literal with variable interpolation in command context

SourceSKILL.md
137className={`${baseStyles} ${variants[variant]} ${sizes[size]} ${className}`}
medium line 208

Template literal with variable interpolation in command context

SourceSKILL.md
208const res = await fetch(`${API_BASE}/api/v1/tasks`, {
medium line 210

Template literal with variable interpolation in command context

SourceSKILL.md
210'Authorization': `Bearer ${localStorage.getItem('token')}`,
medium line 219

Template literal with variable interpolation in command context

SourceSKILL.md
219const res = await fetch(`${API_BASE}/api/v1/tasks`, {
medium line 223

Template literal with variable interpolation in command context

SourceSKILL.md
223'Authorization': `Bearer ${localStorage.getItem('token')}`,
medium line 345

Template literal with variable interpolation in command context

SourceSKILL.md
345<div className={`
medium line 356

Template literal with variable interpolation in command context

SourceSKILL.md
356<h3 className={`font-medium ${task.completed ? 'line-through text-gray-500' : ''}`}>
low line 197

Access to .env file

SourceSKILL.md
197const API_BASE = process.env.NEXT_PUBLIC_API_URL || 'http://localhost:8000'
low line 197

External URL reference

SourceSKILL.md
197const API_BASE = process.env.NEXT_PUBLIC_API_URL || 'http://localhost:8000'
Scanned on Feb 28, 2026
View Security Dashboard