SkillsAdd

contentstack/kickstart-next-ssg · Archived

code-review

Pull-request checklist for security, Contentstack credentials, sanitization, and image configuration.

First seen Jul 16, 2026

Installation

$ npx skills add contentstack/kickstart-next-ssg --skill code-review
View on skills.sh ↗ GitHub repository ↗

Stronger alternatives

This repository is archived — consider an actively maintained alternative.

typescript Same source · more installs
contentstack/kickstart-next-ssg

TypeScript and ESLint conventions, path aliases, and where to place new code.

3 installs
testing Same source
contentstack/kickstart-next-ssg

Test tooling status for this repo and practical notes if you introduce automated tests.

2 installs
framework Same source
contentstack/kickstart-next-ssg

Next.js Pages Router, static props, Tailwind 4, PostCSS, and image configuration for this app.

2 installs
dev-workflow Same source
contentstack/kickstart-next-ssg

Setup, scripts, environment variables, and pull-request CI expectations for this repo.

2 installs

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

flutter-add-widget-preview Similar name
flutter/agent-plugins

Adds interactive widget previews to the project using the previews.dart system. Use when creati…

29.4K installs
recipe-review-overdue-tasks Similar name
googleworkspace/cli

Find Google Tasks that are past due and need attention.

27.2K installs
recipe-review-meet-participants Similar name
googleworkspace/cli

Review who attended a Google Meet conference and for how long.

26.9K installs
security-review Similar name
getsentry/skills

Security code review for vulnerabilities.

15.5K installs
web-design-reviewer Similar name
github/awesome-copilot

This skill enables visual inspection of websites running locally or remotely to identify and fi…

13.3K installs
sql-code-review Similar name
github/awesome-copilot

Universal SQL code review assistant that performs comprehensive security, maintainability, and …

13K installs

Also in this package

Other skills from contentstack/kickstart-next-ssg.

npx skills add contentstack/kickstart-next-ssg
typescript 3 testing 2 framework 2 dev-workflow 2 contentstack-kickstart 2

Browse all from contentstack/kickstart-next-ssg

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

License LICENSE
Default branch main
Open issues 0
Status Archived

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,546 B
  • docs SUMMARY.md 120 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 2 installs

SKILL.md

Code review – kickstart-next-ssg

When to use

  • Before approving or merging a pull request
  • Auditing changes that touch env vars, CMS integration, or user-facing HTML

Instructions

Secrets and configuration

  • No real .env values or delivery/preview tokens committed; use placeholders in docs only.
  • New NEXTPUBLIC* keys are exposed to the browser—avoid putting sensitive server-only secrets behind that prefix.

Contentstack

  • Token scopes and preview settings stay aligned with [README.md](../../README.md) (preview-capable delivery token, Live Preview environment).

Security and dependencies

  • PRs trigger SCA ([.github/workflows/sca-scan.yml](../../.github/workflows/sca-scan.yml)); be explicit about new dependencies and known advisories.
  • Public repos: SECURITY.md and license file expectations per [.github/workflows/policy-scan.yml](../../.github/workflows/policy-scan.yml).

HTML and XSS

  • Rich text and block copy use dangerouslySetInnerHTML only after isomorphic-dompurify in [pages/index.tsx](../../pages/index.tsx); preserve or improve sanitization when changing markup.

Images

  • New remote image domains must be reflected in [next.config.mjs](../../next.config.mjs) images.remotePatterns (or env-driven hostname) so next/image does not break at runtime.

Quality

  • Run npm run lint locally for substantive TS/React changes.