skills.rest
WannaCry081
WannaCry081COMMUNITY
Explore all skills by this author →
WebsiteGitHub

Next.js Security Scan

Identify security vulnerabilities in Next.js projects and TypeScript/JavaScript code.

Updated Aug 23, 2026
Search Tags:#security#vulnerability#owasp#dependencies#audit#nextjs
One-click install
npx skills add https://github.com/WannaCry081/React-Workflow-Starter --skill next-js-security-scan-wannacry081
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Next.js Security Scan
Source: https://github.com/WannaCry081/React-Workflow-Starter/tree/main/.agents/skills/Next.js%20Security%20Scan
Command: npx skills add https://github.com/WannaCry081/React-Workflow-Starter --skill next-js-security-scan-wannacry081

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, npm, yarn, pnpm, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Comprehensive security scanning for Next.js, TypeScript, and JavaScript projects to detect OWASP Top 10, Next.js-specific vulnerabilities, and dependency CVEs.

Core Features & Use Cases

  • OWASP Top 10:2025 coverage and XSS/injection/auth vulnerabilities
  • Next.js-specific checks for Server Actions, middleware, and API routes
  • Dependency audit, secret scanning, and environment variable exposure analysis
  • Generate actionable security reports for pre-deployment review and audit trails

Quick Start

Run a full security scan on your Next.js project to generate a detailed report.

Frequently Asked Questions about Next.js Security Scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on a Next.js project to check for OWASP vulnerabilities?▼

Run a security audit to identify OWASP Top 10:2025 vulnerabilities, XSS, and injection flaws across Next.js app routes and server actions, generating actionable JSON or text reports for pre-deployment review.

Can I scan Next.js Server Actions and middleware for security vulnerabilities?▼

Yes, you can scan Next.js Server Actions, middleware, and API routes to detect framework-specific security vulnerabilities, ensuring your application's server-side operations are secure before deployment.

How do I check Next.js dependencies for known CVEs and environment variable exposure?▼

Check Next.js dependencies for known CVEs and analyze environment variable exposure by running an automated scan that audits your TypeScript and JavaScript code for secrets and security header validation.

Do I need npm or yarn installed to perform a Next.js dependency audit?▼

You need a package manager like npm, yarn, or pnpm installed to perform a Next.js dependency audit, as the scan requires these dependencies alongside jq to parse project files and generate security reports.

What is the best way to generate a security report for a Next.js pre-deployment check?▼

The best way to generate a pre-deployment security report is running an automated scan that validates security headers and audits dependencies, outputting results in JSON or text format for audit trails.

Related Skills

Explore More Software Engineering Skills→
toqoztoqoz

nodejs-package-manager

Detect the correct Node.js package manager by inspecting project lock files.

Community
Basic
ArtemioPadillaArtemioPadilla
3

security-audit

Identify and remediate security risks across code, dependencies, and infrastructure.

Community
Advanced
Cor-IncorporatedCor-Incorporated
4

code-reviewer

Automate code review workflows with Python scripts for static analysis and security checks.

Official
Advanced
ImaginerLabsImaginerLabs

security-auditor

Detect source code, dependency, and configuration security vulnerabilities with prioritized OWASP remediation steps.

Official
Advanced