next-upgrade
Upgrade Next.js Projects Safely
Next.js upgrades can involve breaking changes, codemods, and dependency coordination. This skill guides Claude, Codex, or Claude Code through official migration steps and validation checks.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "next-upgrade" from https://skillstore.io/skills/vercel-labs-next-upgrade.md and its manifest at https://skillstore.io/api/skills/vercel-labs-next-upgrade/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "next-upgrade". Upgrade this Next.js 13 application to the latest supported version.
Expected outcome:
The skill reports the current dependency versions, proposes an incremental path, lists required codemods, and highlights manual migration tasks.
Using "next-upgrade". Review this repository before running any upgrade commands.
Expected outcome:
The skill provides a read-only upgrade plan, dependency impact summary, and approval points for package installs and project scripts.
Using "next-upgrade". After migration changes, check whether the app is ready.
Expected outcome:
The skill summarizes build and development check results, remaining errors, and suggested next fixes for release readiness.
Security Audit
Medium RiskThe skill is a normal Next.js upgrade workflow and contains no prompt injection or data-exfiltration language. The main risk is that it instructs agents to run unpinned npm and npx commands plus project scripts, which can execute third-party or repository-controlled code. The hardcoded URLs point to official Next.js documentation and are not suspicious.
Confirmed security concerns (1)
Capability review items (4)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (12)
🌐 Network access (3)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/vercel-labs-next-upgrade/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/vercel-labs-next-upgrade?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/vercel-labs-next-upgrade?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vercel-labs-next-upgrade/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/vercel-labs-next-upgrade.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
vercel-labs. (2026). next-upgrade security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vercel-labs-next-upgrade/audits/6BibTeX citation
@techreport{vercel-labs-vercel-labs-next-upgrade-2026,
author = {vercel-labs},
title = {next-upgrade security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/vercel-labs-next-upgrade/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "next-upgrade security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "vercel-labs"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/vercel-labs-next-upgrade/audits/6"
identifiers:
- type: other
value: "skillstore:vercel-labs-next-upgrade:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Plan a Version Upgrade
Create a clear migration path from the current Next.js version to the requested target version.
Apply Official Codemods
Select relevant codemods, run them with approval, and review generated source changes.
Validate Release Readiness
Run post-upgrade checks and summarize remaining build, type, or runtime issues.
Try These Prompts
Use the next-upgrade skill to inspect this repository and identify the current Next.js, React, and React DOM versions.
Use the next-upgrade skill to plan an incremental upgrade path to the latest stable Next.js release. Do not change files yet.
Use the next-upgrade skill to find applicable codemods, ask before running commands, then summarize every generated change.
Use the next-upgrade skill to upgrade this app, handle manual breaking changes, update dependencies, and report validation results.
Best Practices
- Review the proposed upgrade path before allowing package manager commands.
- Commit or stash local work before running codemods or dependency updates.
- Run application tests after the build succeeds.
Avoid
- Running unpinned package commands without reading the migration plan.
- Skipping manual review of codemod-generated source changes.
- Treating a successful build as complete release validation.
Frequently Asked Questions
Does this skill upgrade every Next.js version directly?
Will it run commands automatically?
Which documentation does it use?
Can it handle TypeScript projects?
Does it fix all breaking changes?
Is it useful for monorepos?
Developer Details
Author
vercel-labsLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
26421118b848d9f1efc0aa169d8a7a9e7e0a877e
Maintenance freshness
7/18/2026
Usage
6 downloads · 145 views
File structure
📄 SKILL.md