Agent Skills–compliant skill for supastarter.
SaferSkills independently audited supastarter-nextjs-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Expert guidance for building production-ready SaaS applications with the supastarter Next.js starter kit. Next.js only; no Vue/Nuxt content.
Use this skill when:
Follow this order when adding a feature:
packages/database/prisma/schema.prisma; run migrations.packages/database/prisma/queries/ and export from queries/index.ts.packages/api/modules/<name>/ (types, procedures, router); mount router in packages/api/orpc/router.ts.apps/web/ (e.g. modules/shared/components/); use shadcn, TanStack Query, session hooks.packages/i18n/translations/{en,de}.json.Full walkthrough: assets/recipes/feedback-widget.md.
apps/web/ # Next.js app (App Router, app/, components/, config/, lib/)
packages/
api/ # Hono + oRPC (modules/, orpc/router.ts)
auth/ # Better Auth config
database/ # Prisma schema, migrations, queries
i18n/ # Translations
mail/ # React Email templates, providers
storage/ # S3-compatible storage
ui/ # Shared UI (shadcn)
config/ # Shared configUse package exports (e.g. @repo/api, @repo/database) instead of deep relative imports.
Load only the reference files you need. All paths are from the skill root, one level deep.
Before writing code, read references/coding-conventions.md. For copy-paste patterns and commands, use references/code-patterns.md and references/quick-reference.md.
How to run (from supastarter monorepo root):
python scripts/generate_module.py <module-name>Example: python scripts/generate_module.py feedback creates packages/api/modules/feedback/ with types.ts, procedures/create.ts, and router.ts. Mount the router in packages/api/orpc/router.ts manually.
"use client" only when needed.packages/api/modules/.@repo/* package imports; do not instantiate Prisma/Drizzle in app code.Before writing code, read references/coding-conventions.md. For examples and commands: references/code-patterns.md, references/quick-reference.md, references/customization.md, references/api-patterns.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.