dynamic-js-audit

To audit dynamic JavaScript loading, this Skill discovers script tags, dynamic imports, and iframes, then assesses supply chain, XSS, and transport security risks to produce a structured remediation report.

Dynamically loaded scripts and external CDNs introduce supply chain risks, XSS vectors, and weak transport security. This Skill identifies these exposure points and evaluates your Content Security Policy and Subresource Integrity controls.

You can check for non-pinned versions and unsafe inline scripts by running this Skill against your web application repository to surface risky dynamic loading patterns and provide prioritized patches.

Yes, this dynamic script security audit covers iframe contexts and Web Worker usages. It assesses iframe security controls alongside script tags and dynamic imports to identify risky loading patterns.

The best way to remediate risky iframe contexts and weak configurations is by following the generated remediation guidance, which offers prioritized patches and non-breaking alternatives for maintainability.

Yes, you can assess Content Security Policy and Subresource Integrity for dynamically imported modules. The Skill evaluates these security controls during its phase-based assessment of your web application.