Next.Js Security Scan
This is a security scanner built for Next.js projects that runs checks based on OWASP guidelines. It looks for the usual suspects: hardcoded secrets, dependency vulnerabilities, and common security issues in TypeScript and JavaScript code. You'd run this before deployments or during code reviews when you want a systematic pass over your codebase. The skill comes from sugarforever's collection of agent tools and covers multiple scan types, though the specifics aren't detailed in the documentation. It's straightforward automated scanning rather than deep manual analysis, so treat it as a first line of defense that catches obvious problems you might have missed.
- GitHub stars
- 130
- last updated
- Aug 21, 2026
Install
$ npx -y skills add sugarforever/01coder-agent-skills --skill 'Next.js Security Scan' --agent claude-codeInstalls into .claude/skills of the current project.
Files
Next.js Security Scan Skill
This skill enables comprehensive security scanning of Next.js and TypeScript/JavaScript projects based on OWASP guidelines and industry best practices.
When to Use This Skill
- Security audits of Next.js applications
- Code review for security vulnerabilities
- Pre-deployment security checks
- Dependency vulnerability assessment
- Detecting hardcoded secrets and credentials
Scan Types
1. Quick Scan
Fast scan focusing on critical vulnerabilities:
- Hardcoded secrets and API keys
- Dangerous function usage (
dangerouslySetInnerHTML,eval) - Missing authentication in Server Actions
- Known vulnerable dependencies
2. Full Scan
Comprehensive security assessment covering:
- All OWASP Top 10:2025 categories
- XSS vulnerability patterns
- Injection vulnerabilities (SQL, NoSQL, Command)
- Authentication and authorization flaws
- Security misconfigurations
- Cryptographic failures
- Next.js-specific vulnerabilities
- Dependency audit (CVE check)
- Environment variable exposure
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sugarforever/01coder-agent-skills
- Categories
- Frontend Development, Backend & APIs, Security, AI & Agent Building
- First seen
- Jun 3, 2026
More from sugarforever/01coder-agent-skills
All 13Recommended
More Frontend Development
webflow-editor-integrationvallafederico/webflow-dev-setupHandle Webflow Designer/Editor mode vs Published site behavior. Use when detecting the editor, disabling custom animations in the designer, or managing features0skills.sh installs
vercel-react-native-skillsvercel-labs/agent-skillsVercel's official collection of agent skills0skills.sh installs
banner-designnextlevelbuilder/ui-ux-pro-max-skillDesign banners for social media, ads, website heroes, creative assets, and print. Multiple art direction options with AI-generated visuals. Actions: design, cre47.1Kskills.sh installs
baseline-uiibelick/ui-skillsQuickly deslop UI code by fixing spacing, hierarchy, typography, and small layout issues. Use when the interface needs a fast cleanup or polish pass.26Kskills.sh installs
tresjsonmax/nuxt-skillsUse when building 3D scenes with TresJS (Vue Three.js) - provides TresCanvas, composables (useTres, useLoop), Cientos helpers (OrbitControls, useGLTF, Environme1.2Kskills.sh installs
sveltekit-structurespences10/svelte-skills-kitSvelteKit structure guidance. Use for routing, layouts, error handling, SSR, or svelte:boundary. Covers file naming, nested layouts, error boundaries, pending U1.1Kskills.sh installs