Навыки nextjs-on-cloudflare

📦

nextjs-on-cloudflare

Name: nextjs-on-cloudflare
Author: cloudflare

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе

Deploy Next.js Apps on Cloudflare Workers

Moving Next.js applications to Cloudflare Workers requires current compatibility and deployment guidance. This skill selects vinext workflows for new projects, migrations, development, and deployment.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "nextjs-on-cloudflare" from https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare.md and its manifest at https://skillstore.io/api/skills/cloudflare-nextjs-on-cloudflare/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/cloudflare-nextjs-on-cloudflare.md Подписанный manifest GET /api/skills/cloudflare-nextjs-on-cloudflare/manifest Подписанный lockfile GET /api/skills/cloudflare-nextjs-on-cloudflare/lockfile

Протестировать

Использование «nextjs-on-cloudflare». Should a new Cloudflare Workers project use vinext or OpenNext?

Ожидаемый результат:

Use vinext for a new project unless project requirements or an explicit decision require OpenNext. Confirm required Next.js features before implementation.

Использование «nextjs-on-cloudflare». Migrate my existing Next.js application to Cloudflare Workers.

Ожидаемый результат:

Confirm that the repository contains an existing Next.js application.
Run the vinext compatibility assessment and document unsupported features.
Apply the migration workflow with Cloudflare selected as the target.
Test local Workers behavior before deployment.

Аудит безопасности

Высокий риск

v1 • 06.09.2026 Открыть версионный отчет

Three command-related findings are confirmed because the skill directs agents to run external packages for installation and project creation. Documentation links, inline identifiers, and remote .agents paths are false positives, but the mutable upstream delegation creates a separate supply-chain risk.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Высокий

SKILL.md:21-30

Unpinned External Skill Delegation

The skill installs cloudflare/vinext through npx and tells agents to follow instructions from the mutable main branch. A compromised package or later repository change could introduce unaudited commands.

Lines 21 through 30 explicitly combine external installation with instructions loaded from unpinned GitHub main paths. The current source appears legitimate, but its future contents are outside this audit.

Пункты проверки возможностей (3)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний

SKILL.md:3

Ruby/shell backtick execution

description: Build, migrate, and deploy Next.js apps on Cloudflare Workers with vinext. Use when sta

The description explicitly directs the agent to run `npx skills add cloudflare/vinext`. This executes an external package and installs unaudited content.

Средний

SKILL.md:23-25

Ruby/shell backtick execution

```sh

The shell block runs `npx skills add cloudflare/vinext`, which downloads and executes an external package. This creates package and instruction supply-chain exposure.

Средний

SKILL.md:29-30

Ruby/shell backtick execution

- **New project:** follow vinext's [new-project setup](https://github.com/cloudflare/vinext#starting

The workflow directs agents to use the external `create-vinext-app` executable. Running that package can create files and execute package lifecycle behavior.

Факторы риска

⚙️ Внешние команды (7)

SKILL.md:3 SKILL.md:14 SKILL.md:23-25 SKILL.md:25-27 SKILL.md:27-29 SKILL.md:29-30 SKILL.md:30-33

🌐 Доступ к сети (7)

SKILL.md:8 SKILL.md:12 SKILL.md:21 SKILL.md:27 SKILL.md:29 SKILL.md:30 SKILL.md:31

📁 Доступ к файловой системе (2)

SKILL.md:21 SKILL.md:30

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/cloudflare-nextjs-on-cloudflare/security.svg)](https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-nextjs-on-cloudflare/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/cloudflare-nextjs-on-cloudflare.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

cloudflare. (2026). nextjs-on-cloudflare security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1

Цитата BibTeX

@techreport{cloudflare-cloudflare-nextjs-on-cloudflare-2026,
  author = {cloudflare},
  title = {nextjs-on-cloudflare security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nextjs-on-cloudflare security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "cloudflare"
date-released: "2026-09-06"
url: "https://skillstore.io/skills/cloudflare-nextjs-on-cloudflare/audits/1"
identifiers:
  - type: other
    value: "skillstore:cloudflare-nextjs-on-cloudflare:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Start a Workers Project

Create a new Next.js application with vinext and select Cloudflare Workers as the deployment target.

Migrate an Existing Application

Assess compatibility and move an established Next.js project to vinext without treating an empty directory as a migration.

Standardize Deployment Guidance

Apply current vinext and Workers documentation while preserving existing OpenNext choices during unrelated work.

Попробуйте эти промпты

Choose a Project Path

I am starting a Next.js application on Cloudflare Workers. Choose the appropriate vinext setup path and list the required decisions.

Plan a Migration

Review this existing Next.js project for a vinext migration. Identify compatibility checks, likely blockers, and the Cloudflare target configuration.

Preserve OpenNext

Update this Cloudflare Next.js project without replacing its existing OpenNext setup. Explain which changes remain within the requested maintenance scope.

Design a Deployment Workflow

Create a vinext development and deployment plan for this repository. Cover Workers bindings, local workerd testing, compatibility validation, and rollback checks.

Лучшие практики

Confirm required Next.js features against current vinext compatibility information.
Preserve an existing OpenNext setup unless the user explicitly requests migration.
Review external skill sources and request approval before installing packages.

Избегать

Do not apply the migration workflow to an empty directory.
Do not assume complete parity with every Next.js feature.
Do not replace OpenNext during unrelated maintenance.

Часто задаваемые вопросы

Which runtime does this skill target?

It targets Next.js applications running on Cloudflare Workers through vinext.

Does it support new projects?

Yes. It directs new projects to create-vinext-app with Cloudflare selected as the target.

Can it migrate an existing Next.js application?

Yes. It directs existing applications through the upstream migration skill and compatibility checks.

Will it replace an existing OpenNext setup?

No. It preserves OpenNext during unrelated maintenance unless the user explicitly chooses migration.

Does vinext support every Next.js feature?

No guarantee is provided. Check current compatibility for every feature the application requires.

Does this skill install external tools?

Its workflow may install upstream vinext skills with npx. Review the source and approve execution before installation.

Сведения для разработчиков

Автор

cloudflare

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/cloudflare/skills/tree/d924cd8f59e75e08fd3dd52843bb2776de35c77e/skills/nextjs-on-cloudflare

Ссылка

e5464e662405de6361fdde6b984f9ea865635f64

Актуальность поддержки

08.09.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md