[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71TFBEPFJBFXFBWGEBNAWZG":3,"skill-same:01M71TFBEPFJBFXFBWGEBNAWZG":68},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":39,"linkOnly":40,"markdownContent":41,"markdownBody":42,"frontMatter":43,"refName":46,"commitSha":47,"skillDirectory":48,"forksCount":49,"repositoryHtmlUrl":50,"repositoryHomepageUrl":6,"ownerHtmlUrl":51,"ownerBlogUrl":52,"ownerDescription":53,"updatedAt":54,"install":55,"resources":67},"01M71TFBEPFJBFXFBWGEBNAWZG","nextjs-security-review",null,"Use when a Next.js project or security audit involves App Router, route handlers, middleware, auth, validation, headers, environment variables, deployment, logging, redirects, SSRF, uploads, or rate limits.","priyanshuchawda\u002Fcodeaudit","priyanshuchawda","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F86182776?v=4","01M71TEPGTQ7JF9HFY0A148WZT","Priyanshu Chawda","01M71TEPHJEC1K5JRETDJJ42P0",1,"MIT","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fnextjs-security-review\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38],"security","nextjs security review","nextjs security","nextjs","security review","review","audit","security audit","router","route","next","project","app","auth","middleware","Variables","headers","rate","limits","when","2026-11-10 13:02:02",false,"---\nname: nextjs-security-review\ndescription: Use when a Next.js project or security audit involves App Router, route handlers, middleware, auth, validation, headers, environment variables, deployment, logging, redirects, SSRF, uploads, or rate limits.\nmetadata:\n  internal: true\n---\n\n# Next.js Security Review\n\n## Required Checks\n\n- App Router conventions and server\u002Fclient boundaries.\n- Route handlers and server actions for input validation.\n- Auth and authorization checks on sensitive paths.\n- Middleware coverage or documented route-level alternatives.\n- Rate limiting on public mutation and AI\u002Fmodel routes.\n- Security headers and deployment-layer header evidence.\n- Environment validation and client\u002Fserver secret separation.\n- Unsafe redirects, SSRF, file uploads, and raw provider error leakage.\n- Logging that may expose headers, cookies, tokens, requests, or model\u002Fprovider errors.\n\n## Evidence\n\nUse concrete files such as `middleware.ts`, `app\u002Fapi\u002F**\u002Froute.ts`, `next.config.*`, env modules, tests, and security docs. If a control is missing, say missing rather than assuming it exists elsewhere.\n","# Next.js Security Review\n\n## Required Checks\n\n- App Router conventions and server\u002Fclient boundaries.\n- Route handlers and server actions for input validation.\n- Auth and authorization checks on sensitive paths.\n- Middleware coverage or documented route-level alternatives.\n- Rate limiting on public mutation and AI\u002Fmodel routes.\n- Security headers and deployment-layer header evidence.\n- Environment validation and client\u002Fserver secret separation.\n- Unsafe redirects, SSRF, file uploads, and raw provider error leakage.\n- Logging that may expose headers, cookies, tokens, requests, or model\u002Fprovider errors.\n\n## Evidence\n\nUse concrete files such as `middleware.ts`, `app\u002Fapi\u002F**\u002Froute.ts`, `next.config.*`, env modules, tests, and security docs. If a control is missing, say missing rather than assuming it exists elsewhere.\n",{"name":5,"metadata":44,"description":7},{"internal":45},true,"main","f7c3f3ddb5b3c5d42bed4fb0b9d28e766380b959","skills\u002Fnextjs-security-review",0,"https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda","priyanshuworks.tech","AI Agent Engineer | Building DevTools & Automation","2026-05-04 12:27:13",{"source":8,"skillName":5,"commands":56,"prompt":66,"zipAvailable":45},[57,60,63],{"tool":58,"command":59},"npx","npx skills add priyanshuchawda\u002Fcodeaudit --skill nextjs-security-review",{"tool":61,"command":62},"bunx","bunx skills add priyanshuchawda\u002Fcodeaudit --skill nextjs-security-review",{"tool":64,"command":65},"pnpm","pnpm dlx skills add priyanshuchawda\u002Fcodeaudit --skill nextjs-security-review","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fnextjs-security-review\u002FSKILL.md",[],[69,88,98,127,145,172],{"skillNo":70,"name":71,"nameZh":6,"description":72,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":73,"categories":74,"keywords":75,"publishedAt":39},"01M71TG5F1YSS9YP7VF5SNHM58","dangerous-helper","Unsafe fixture skill for supply-chain audit tests.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Frisky-skills\u002Fskills\u002Fdangerous-helper\u002FSKILL.md",[],[76,77,78,79,25,80,81,82,83,84,85,86,87],"dangerous","helper","dangerous helper","supply-chain","audit tests","unsafe","tests","fixture skill","for","chain","fixture","supply",{"skillNo":89,"name":90,"nameZh":6,"description":91,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":92,"categories":93,"keywords":94,"publishedAt":39},"01M71TG2HYMTMBAWX4H0C3JK6D","benign-helper","Safe fixture skill for supply-chain audit tests.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Frisky-skills\u002Fskills\u002Fbenign-helper\u002FSKILL.md",[],[95,96,77,79,97,25,80,82,83,84,85,86,87],"benign helper","benign","safe",{"skillNo":99,"name":100,"nameZh":6,"description":101,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":102,"categories":103,"keywords":109,"publishedAt":39},"01M71TFVD6R75MSF6P6FWCJS24","skill-supply-chain-auditor","Use when reviewing installed skills, adding third-party skills, hardening agent workflows, checking skill correctness, removing duplicate skills, or investigating supply-chain, prompt-injection, secret-leakage, dependency-install, webhook, destructive-shell, manifest-quality, or resource-discovery risks.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fskill-supply-chain-auditor\u002FSKILL.md",[104],{"categoryNo":105,"categoryName":106,"taxonomyType":107,"taxonomyTypeDesc":108},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[87,85,110,111,112,113,114,115,116,117,118,119,38,120,121,122,123,124,125,126],"skill supply chain auditor","supply chain","auditor","secret","shell","dependency","duplicate","correctness","prompt-injection","manifest","workflows","prompt","use","agent workflows","discovery","webhook","true",{"skillNo":128,"name":129,"nameZh":6,"description":130,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":131,"categories":132,"keywords":136,"publishedAt":39},"01M71TFQWGR5ZPYJ7G83S5BHFF","refactor-with-tests","Use when splitting files, improving architecture, reducing duplication, changing internals, or preserving behavior through focused tests during refactors.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Frefactor-with-tests\u002FSKILL.md",[133],{"categoryNo":134,"categoryName":135,"taxonomyType":107,"taxonomyTypeDesc":108},"01JBSEEDCAT000000000000007","代码审查",[137,138,139,82,126,140,141,142,143,38,122,144],"refactor","with","refactor with tests","reducing","duplication","behavior","architecture","files",{"skillNo":146,"name":147,"nameZh":6,"description":148,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":149,"categories":150,"keywords":155,"publishedAt":39},"01M71TFMPQ57A7PXN4DDC0X2J4","python-mcp-server-quality","Use when creating, auditing, or improving Python MCP servers, FastMCP tools, resources, prompts, stdio transports, streamable HTTP transports, MCP Inspector setup, or Python tool schemas.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fpython-mcp-server-quality\u002FSKILL.md",[151,154],{"categoryNo":152,"categoryName":153,"taxonomyType":107,"taxonomyTypeDesc":108},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":105,"categoryName":106,"taxonomyType":107,"taxonomyTypeDesc":108},[156,157,158,159,160,161,126,162,163,164,122,165,166,167,168,169,170,38,171],"quality","server","python mcp server quality","mcp server","MCP","python","schemas","tool","resources","fastmcp","Tools","setup","prompts","mcp servers","servers","http",{"skillNo":173,"name":174,"nameZh":6,"description":175,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":176,"categories":177,"keywords":184,"publishedAt":39},"01M71TFH72ZKT4959VEKNV1N12","python-backend-quality","Use when reviewing, creating, or improving Python services, CLIs, libraries, FastAPI, Django, Flask, pytest, uv, pyproject, typing, Pydantic, SQLAlchemy, async code, packaging, or deployment.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fpython-backend-quality\u002FSKILL.md",[178,179],{"categoryNo":152,"categoryName":153,"taxonomyType":107,"taxonomyTypeDesc":108},{"categoryNo":180,"categoryName":181,"taxonomyType":182,"taxonomyTypeDesc":183},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[185,161,156,186,187,38,188,189,190,191,192,122,193,194,126,195,196,197,198,199],"python backend","backend","python backend quality","python services","Pydantic","services","libraries","code","fastapi","uv","async","packaging","deployment","django","typing"]