elm-security-review

Audit Elm code for port safety, JSON decoder validation, and XSS prevention.

Updated Oct 11, 2025
One-click install
npx skills add https://github.com/bromanko/llm-agents --skill elm-security-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: elm-security-review
Source: https://github.com/bromanko/llm-agents/tree/main/skills/elm-security-review
Command: npx skills add https://github.com/bromanko/llm-agents --skill elm-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in Elm applications by identifying and mitigating potential vulnerabilities, ensuring the integrity and safety of user data and application logic.

Core Features & Use Cases

  • Comprehensive Security Audits: Analyzes Elm code for common security flaws, including port safety, JSON decoder validation, XSS prevention, and dependency vulnerabilities.
  • Targeted Vulnerability Detection: Focuses on critical boundaries like ports, HTTP requests, and user input handling to pinpoint weaknesses.
  • Use Case: A developer can use this skill to proactively scan their Elm codebase for security risks before deployment, ensuring compliance with security best practices and protecting against potential exploits.

Quick Start

Run /review elm security to start an interactive security review of the Elm code.

Frequently Asked Questions about elm-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Elm code for security vulnerabilities like XSS and port safety?

To audit Elm code for security vulnerabilities, analyze data flow from untrusted input sources and check runtime boundaries like ports, HTTP requests, and JSON decoders for XSS prevention and validation weaknesses.

What security risks should I check for when reviewing Elm ports and JSON decoders?

When reviewing Elm ports and JSON decoders, check for unvalidated untrusted input sources, inadequate runtime boundary validation, and potential XSS vectors that could compromise application logic and user data integrity.

Can I use an automated review to scan my Elm codebase for dependency vulnerabilities before deployment?

Yes, you can scan your Elm codebase for dependency vulnerabilities before deployment by running an interactive security review that proactively checks port safety, JSON decoder validation, and XSS prevention.

How do Elm false-positive rules affect security audits and vulnerability detection?

Elm false-positive rules affect security audits by requiring adherence to shared security review guidelines, ensuring accurate vulnerability assessment and preventing inaccurate flagging of safe Elm code patterns.

What is the best way to secure Elm applications against untrusted input and runtime boundary exploits?

The best way to secure Elm applications against untrusted input is to perform comprehensive security audits focusing on port safety, JSON decoder validation, and dependency security at critical runtime boundaries.