Habilidades nextjs-on-cloudflare
📦

nextjs-on-cloudflare

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos

Deploy Next.js Apps on Cloudflare Workers

Moving Next.js applications to Cloudflare Workers requires current compatibility and deployment guidance. This skill selects vinext workflows for new projects, migrations, development, and deployment.

Compatible con: Claude Codex Code(CC)
⚠️ 38 Deficiente

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "nextjs-on-cloudflare" from https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare.md and its manifest at https://skillstore.io/api/skills/cloudflare-nextjs-on-cloudflare/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/cloudflare-nextjs-on-cloudflare.md Manifest firmado GET /api/skills/cloudflare-nextjs-on-cloudflare/manifest Lockfile firmado GET /api/skills/cloudflare-nextjs-on-cloudflare/lockfile

Pruébalo

Usando "nextjs-on-cloudflare". Should a new Cloudflare Workers project use vinext or OpenNext?

Resultado esperado:

Use vinext for a new project unless project requirements or an explicit decision require OpenNext. Confirm required Next.js features before implementation.

Usando "nextjs-on-cloudflare". Migrate my existing Next.js application to Cloudflare Workers.

Resultado esperado:

  • Confirm that the repository contains an existing Next.js application.
  • Run the vinext compatibility assessment and document unsupported features.
  • Apply the migration workflow with Cloudflare selected as the target.
  • Test local Workers behavior before deployment.

Auditoría de seguridad

Riesgo alto
v1 • 6/9/2026 Abrir el informe versionado

Three command-related findings are confirmed because the skill directs agents to run external packages for installation and project creation. Documentation links, inline identifiers, and remote .agents paths are false positives, but the mutable upstream delegation creates a separate supply-chain risk.

1
Archivos escaneados
34
Líneas analizadas
3
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Alto
SKILL.md:21-30
Unpinned External Skill Delegation
The skill installs cloudflare/vinext through npx and tells agents to follow instructions from the mutable main branch. A compromised package or later repository change could introduce unaudited commands.
Lines 21 through 30 explicitly combine external installation with instructions loaded from unpinned GitHub main paths. The current source appears legitimate, but its future contents are outside this audit.
Elementos de revisión de capacidades (3)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Medio
SKILL.md:3
Ruby/shell backtick execution
description: Build, migrate, and deploy Next.js apps on Cloudflare Workers with vinext. Use when sta
The description explicitly directs the agent to run `npx skills add cloudflare/vinext`. This executes an external package and installs unaudited content.
Medio
SKILL.md:23-25
Ruby/shell backtick execution
```sh
The shell block runs `npx skills add cloudflare/vinext`, which downloads and executes an external package. This creates package and instruction supply-chain exposure.
Medio
SKILL.md:29-30
Ruby/shell backtick execution
- **New project:** follow vinext's [new-project setup](https://github.com/cloudflare/vinext#starting
The workflow directs agents to use the external `create-vinext-app` executable. Running that package can create files and execute package lifecycle behavior.

Factores de riesgo

⚙️ Comandos externos (7)
SKILL.md:3 SKILL.md:14 SKILL.md:23-25 SKILL.md:25-27 SKILL.md:27-29 SKILL.md:29-30 SKILL.md:30-33
🌐 Acceso a red (7)
SKILL.md:8 SKILL.md:12 SKILL.md:21 SKILL.md:27 SKILL.md:29 SKILL.md:30 SKILL.md:31
📁 Acceso al sistema de archivos (2)
SKILL.md:21 SKILL.md:30
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/cloudflare-nextjs-on-cloudflare/security.svg)](https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-nextjs-on-cloudflare/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/cloudflare-nextjs-on-cloudflare.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

cloudflare. (2026). nextjs-on-cloudflare security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1

Cita BibTeX

@techreport{cloudflare-cloudflare-nextjs-on-cloudflare-2026, author = {cloudflare}, title = {nextjs-on-cloudflare security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "nextjs-on-cloudflare security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "cloudflare" date-released: "2026-09-06" url: "https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1" identifiers: - type: other value: "skillstore:cloudflare-nextjs-on-cloudflare:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
91
Cumplimiento de la especificación

Lo que puedes crear

Start a Workers Project

Create a new Next.js application with vinext and select Cloudflare Workers as the deployment target.

Migrate an Existing Application

Assess compatibility and move an established Next.js project to vinext without treating an empty directory as a migration.

Standardize Deployment Guidance

Apply current vinext and Workers documentation while preserving existing OpenNext choices during unrelated work.

Prueba estos prompts

Choose a Project Path 
I am starting a Next.js application on Cloudflare Workers. Choose the appropriate vinext setup path and list the required decisions.
Plan a Migration 
Review this existing Next.js project for a vinext migration. Identify compatibility checks, likely blockers, and the Cloudflare target configuration.
Preserve OpenNext 
Update this Cloudflare Next.js project without replacing its existing OpenNext setup. Explain which changes remain within the requested maintenance scope.
Design a Deployment Workflow 
Create a vinext development and deployment plan for this repository. Cover Workers bindings, local workerd testing, compatibility validation, and rollback checks.

Mejores prácticas

  • Confirm required Next.js features against current vinext compatibility information.
  • Preserve an existing OpenNext setup unless the user explicitly requests migration.
  • Review external skill sources and request approval before installing packages.

Evitar

  • Do not apply the migration workflow to an empty directory.
  • Do not assume complete parity with every Next.js feature.
  • Do not replace OpenNext during unrelated maintenance.

Preguntas frecuentes

Which runtime does this skill target?
It targets Next.js applications running on Cloudflare Workers through vinext.
Does it support new projects?
Yes. It directs new projects to create-vinext-app with Cloudflare selected as the target.
Can it migrate an existing Next.js application?
Yes. It directs existing applications through the upstream migration skill and compatibility checks.
Will it replace an existing OpenNext setup?
No. It preserves OpenNext during unrelated maintenance unless the user explicitly chooses migration.
Does vinext support every Next.js feature?
No guarantee is provided. Check current compatibility for every feature the application requires.
Does this skill install external tools?
Its workflow may install upstream vinext skills with npx. Review the source and approve execution before installation.

Detalles del desarrollador

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/cloudflare/skills/tree/d924cd8f59e75e08fd3dd52843bb2776de35c77e/skills/nextjs-on-cloudflare

Ref.

e5464e662405de6361fdde6b984f9ea865635f64

Actualidad del mantenimiento

8/9/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md