nextjs-security-stinger
Deep Next.js security audit (13 to 16, App and Pages Router). Version advisories, proxy and middleware auth, Server Actions, Route Handlers, data exposure, caching, config. Read-only.
- Version
- 1.0.0
- License
- AGPL-3.0-or-later
- Compatibility
- Claude Code 2.1 or newer, Cursor 2.4 or newer, Codex, Cowork. Scan script needs Python 3.9 or newer (standard library only). ripgrep recommended.
Pinned to revision 4415691ad3b9, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/nextjs-security-stinger/SKILL.md
- skills/nextjs-security-stinger/guides/00-scoping.md
- skills/nextjs-security-stinger/guides/01-version-and-advisory-check.md
- skills/nextjs-security-stinger/guides/02-proxy-middleware-and-auth-boundaries.md
- skills/nextjs-security-stinger/guides/03-server-actions-and-route-handlers.md
- skills/nextjs-security-stinger/guides/04-data-exposure-and-caching.md
- skills/nextjs-security-stinger/guides/05-config-and-headers.md
- skills/nextjs-security-stinger/guides/06-writing-findings.md
- skills/nextjs-security-stinger/references/REFERENCE.md
- skills/nextjs-security-stinger/references/advisory-table.md
- skills/nextjs-security-stinger/references/ai-failure-patterns.md
- skills/nextjs-security-stinger/references/checks-config-and-headers.md
- skills/nextjs-security-stinger/references/checks-data-exposure-and-caching.md
- skills/nextjs-security-stinger/references/checks-proxy-and-auth-boundaries.md
- skills/nextjs-security-stinger/references/checks-server-actions-and-route-handlers.md
- skills/nextjs-security-stinger/references/finding-templates.md
- skills/nextjs-security-stinger/references/next-advisories.json
- skills/nextjs-security-stinger/references/research/distilled-nextjs-security.md
- skills/nextjs-security-stinger/scripts/next_audit_scan.py
- skills/nextjs-security-stinger/scripts/test_symlinks.py
Every link opens the file at its source, pinned to the revision this page describes.