Agent skill

Nextjs Data Access Layer

by HoangNguyen0403 in HoangNguyen0403/agent-skills-standard

Build secure, reusable data access patterns with DTOs, taint checks, and colocated authorization in Next.js.

MITAuto-check passedDatabases

Install Nextjs Data Access Layer

skills CLI
$ npx skills add HoangNguyen0403/agent-skills-standard --skill nextjs-data-access-layer -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install HoangNguyen0403/agent-skills-standard nextjs-data-access-layer --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/nextjs/nextjs-data-access-layer .claude/skills/nextjs-data-access-layer && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
nextjs-data-access-layer
GitHub stars
572
Token cost
~575 tokens
SKILL.md length
227 words
Files
4 (incl. references)
Skills in repo
211
Repo updated
First seen
Licence
MIT

At a glance

Build secure, reusable data access patterns with DTOs, taint checks, and colocated authorization in Next.js.

  • Works in 5 steps: Create DAL module in services/ or… → Verify auth inside every DAL function… → Transform raw DB/API data into DTOs… → …
  • Centralizing database queries
  • SKILL.md covers Priority: P1 (HIGH), Workflow, Implementation Guidelines and Limitations, plus 2 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Nextjs Data Access Layer is an agent skill from HoangNguyen0403/agent-skills-standard. Build secure, reusable data access patterns with DTOs, taint checks, and colocated authorization in Next.js. Use when centralizing database queries, transforming raw data to DTOs, adding server-only guards, or preventing sensitive data from reaching Client Components.

Its SKILL.md is about 580 tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including reference files (for example `evals/evals.json`, `references/implementation.md` and `references/patterns.md`).

It sits in Databases, covering ORMs and data access and Authorization and RBAC. It works with Next.js. The repository describes itself as: A collection of Agent Skills Standard and Best Practice for Programming Languages, Frameworks that help our AI Agent follow best practies on frameworks and programming laguages. The licence is MIT.

When your agent uses it

  • Centralizing database queries
  • Transforming raw data to DTOs
  • Adding server-only guards
  • Preventing sensitive data from reaching Client Components

Example prompts

  • “/nextjs-data-access-layer”

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Create DAL module in services/ or lib/data.ts with import 'server-only'.
  2. Verify auth inside every DAL function using await auth().
  3. Transform raw DB/API data into DTOs before returning to components.
  4. Wrap with cache() from React to deduplicate requests within render cycle.
  5. Taint-check sensitive objects to prevent accidental client exposure.

What it can do on your machine

Read from SKILL.md and the folder at commit b529c2d. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Nextjs Data Access Layer loads about 575 tokens when it runs, and up to ~1.1k if it reads all its reference files. Until then it costs about 73 tokens; SKILL.md has 227 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~73
When it runs · the whole SKILL.md, loaded when a task matches
~575
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from HoangNguyen0403/agent-skills-standard at commit b529c2d, republished under its MIT licence (© HoangNguyen0403). 227 words, ~575 tokens.

Download SKILL.mdSave it as .claude/skills/nextjs-data-access-layer/SKILL.md (or your agent's skills folder). This skill also uses 3 other files; get the full folder from GitHub.
name
nextjs-data-access-layer
description
Build secure, reusable data access patterns with DTOs, taint checks, and colocated authorization in Next.js. Use when centralizing database queries, transforming raw data to DTOs, adding server-only guards, or preventing sensitive data from reaching Client Components.

Data Access Layer (DAL)

Priority: P1 (HIGH)

Centralize all data access (Database & External APIs) to ensure consistent security, authorization, and caching.

Workflow

  1. Create DAL module in services/ or lib/data.ts with import 'server-only'.
  2. Verify auth inside every DAL function using await auth().
  3. Transform raw DB/API data into DTOs before returning to components.
  4. Wrap with cache() from React to deduplicate requests within render cycle.
  5. Taint-check sensitive objects to prevent accidental client exposure.

See implementation examples

Implementation Guidelines

  • DTOs: Always transform raw data into plain objects. Never return ORM model instances.
  • Security: Use taintObjectReference or taintUniqueValue from experimental taint API to guard sensitive data.
  • Authorization: Colocate auth checks inside every DAL function. Never rely on UI layer.
  • Caching: Wrap DAL functions in cache() to deduplicate within single render.
  • Error Handling: Throw standardized errors (NotFoundError, UnauthorizedError) caught by error.tsx or notFound().

Limitations

  • Client Components cannot import DAL files. Use Server Actions or Route Handlers as bridges.

Anti-Patterns

  • No auth checks outside DAL: Auth verification must live inside DAL functions.
  • No raw ORM instances returned: Transform to plain DTO objects before returning.
  • No fetch('localhost/api') in Server Components: Call DAL functions directly.
  • No DAL imports in Client Components: Use Server Actions or Route Handlers as bridges.

Canonical response anchors

When this skill applies, preserve the following domain terminology or equivalent concrete examples in the answer when relevant:

  • transform

© HoangNguyen0403, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 3 other files (references) in skills/nextjs/nextjs-data-access-layer of HoangNguyen0403/agent-skills-standard.

  • SKILL.md
  • evals/evals.json
  • references/implementation.md
  • references/patterns.md

Open the folder on GitHubat commit b529c2d

Compare with similar skills

Nextjs Data Access Layer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Nextjs Data Access Layer compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Nextjs Data Access Layer this skillHoangNguyen0403/agent-skills-standard572—~575Automated safety check: PassMIT
Supercheck Architecturesupercheck-io/supercheck215—~1.3kAutomated safety check: PassAGPL-3.0
ImplementAI-Unified-Process/marketplace142—~4.7kAutomated safety check: WarnApache-2.0
Database Migration Patterns with RLSbybren-llc/safe-agentic-workflow423—~1.3kAutomated safety check: PassMIT
Context7 MCPrtadewald/skills185—~681Automated safety check: PassNone
Documentation Lookupaffaan-m/ECC276k1 repos~670Automated safety check: PassMIT

Similar skills

  • Supercheck Architecture

    supercheck-io/supercheck

    Work on Supercheck system architecture, Next.js routes and actions, React data hooks, Drizzle schemas and migrations, app-worker boundaries, or cross-package contracts.

    215 GitHub stars~1.3k tokensUpdated today
    DatabasesAuto-check passed
  • Implement

    AI-Unified-Process/marketplace

    Implements use cases across a NestJS backend with Drizzle ORM over PostgreSQL and a Next.js App Router frontend wired to that API.

    142 GitHub stars~4.7k tokensUpdated 6 days ago
    DatabasesAuto-check: warnings
  • Database Migration Patterns with RLS

    bybren-llc/safe-agentic-workflow

    Database migration creation with mandatory RLS policies and ARCHitect approval workflow. Use when creating migrations, adding tables with RLS, updating ORM…

    423 GitHub stars~1.3k tokensUpdated 2 mo ago
    DatabasesAuto-check passed
  • Context7 MCP

    rtadewald/skills

    This skill should be used when the user asks about libraries, frameworks, API references, or needs code examples.

    185 GitHub stars~681 tokensUpdated 12 days ago
    DatabasesAuto-check passed
  • 通过 Context7 MCP 使用最新的库和框架文档,而非训练数据。当用户提出设置问题、API参考、代码示例或命名框架(例如 React、Next.js、Prisma)时激活。

    276k GitHub starsUsed in 1 repo~670 tokens
    DatabasesAuto-check passed
  • Context7 MCP

    danielvm-git/bigpowers

    Fetch current library docs via Context7 MCP instead of training data.

    260 GitHub stars~603 tokensUpdated 19 days ago
    DatabasesAuto-check passed

More from HoangNguyen0403/agent-skills-standard

All 211 skills in this repo
  • Subagent-Driven Development

    HoangNguyen0403/agent-skills-standard

    Runs a multi-task implementation plan by sending each task to a fresh implementer subagent, reviewing it independently, then reviewing the whole branch.

    572 GitHub stars~1.3k tokensUpdated yesterday
    Auto-check passed
  • draw.io Architecture Diagramming

    HoangNguyen0403/agent-skills-standard

    Draws architecture diagrams as editable draw.io files from a JSON spec, with a fixed house style, one C4 level per diagram and evidence-tagged shapes.

    572 GitHub stars~1.3k tokensUpdated yesterday
    Auto-check passed
  • Android Navigation 3 Guide

    HoangNguyen0403/agent-skills-standard

    Implements and migrates to Jetpack Navigation 3 in Compose: NavDisplay, typed route objects, a state-list back stack, deep links, multiple back stacks and dialog scenes.

    572 GitHub stars~687 tokensUpdated yesterday
    Auto-check passed
  • Angular HttpClient Standards

    HoangNguyen0403/agent-skills-standard

    Sets rules for Angular HTTP code: functional interceptors, typed requests, services that own every call, and httpResource for reactive data loading in Angular 17+.

    572 GitHub stars~652 tokensUpdated yesterday
    Auto-check passed
  • Angular Tooling

    HoangNguyen0403/agent-skills-standard

    Angular CLI usage, code generation, build configuration, and bundle optimization.

    572 GitHub stars~743 tokensUpdated yesterday
    Auto-check passed
  • Common Code Review

    HoangNguyen0403/agent-skills-standard

    Conduct high-quality, persona-driven code reviews. An agent skill from HoangNguyen0403/agent-skills-standard.

    572 GitHub stars~772 tokensUpdated yesterday
    Auto-check passed

Works with

Questions about Nextjs Data Access Layer

What does Nextjs Data Access Layer do?

Build secure, reusable data access patterns with DTOs, taint checks, and colocated authorization in Next.js. Nextjs Data Access Layer is an agent skill from HoangNguyen0403/agent-skills-standard.js.

When should I use Nextjs Data Access Layer?

Nextjs Data Access Layer fits situations like: centralizing database queries; transforming raw data to DTOs; adding server-only guards; preventing sensitive data from reaching Client Components.

How do I install Nextjs Data Access Layer in Claude Code?

Run `npx skills add HoangNguyen0403/agent-skills-standard --skill nextjs-data-access-layer -a claude-code`. Or copy the skill folder (skills/nextjs/nextjs-data-access-layer in HoangNguyen0403/agent-skills-standard) into .claude/skills/nextjs-data-access-layer in your project. Claude Code loads it when a task matches its description.

How do I install Nextjs Data Access Layer in Codex?

Run `npx skills add HoangNguyen0403/agent-skills-standard --skill nextjs-data-access-layer -a codex`. Or copy the skill folder (skills/nextjs/nextjs-data-access-layer in HoangNguyen0403/agent-skills-standard) into .agents/skills/nextjs-data-access-layer in your project. Codex loads it when a task matches its description.

Can I use Nextjs Data Access Layer in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add HoangNguyen0403/agent-skills-standard --skill nextjs-data-access-layer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/nextjs-data-access-layer, .gemini/skills/nextjs-data-access-layer, .github/skills/nextjs-data-access-layer and .opencode/skills/nextjs-data-access-layer in your project.

What does Nextjs Data Access Layer need to run?

SKILL.md names no scripts, command-line tools or credentials: Nextjs Data Access Layer is instructions for the agent only.

Does Nextjs Data Access Layer access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Nextjs Data Access Layer safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Nextjs Data Access Layer use?

Nextjs Data Access Layer is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Nextjs Data Access Layer use?

About 575 tokens (SKILL.md is roughly 2.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 550 tokens, read only when the agent opens those files.

What are the alternatives to Nextjs Data Access Layer?

Skills that share tags, products or a category with Nextjs Data Access Layer: Supercheck Architecture (supercheck-io/supercheck, 215 stars), Implement (AI-Unified-Process/marketplace, 142 stars), Database Migration Patterns with RLS (bybren-llc/safe-agentic-workflow, 423 stars) and Context7 MCP (rtadewald/skills, 185 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Nextjs Data Access Layer?

HoangNguyen0403 (a GitHub user) maintains it in HoangNguyen0403/agent-skills-standard, which has 572 GitHub stars. The repository holds 211 skills in this directory. The repository was last updated on October 9, 2026.

Source: HoangNguyen0403/agent-skills-standard on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.