skills.rest
Kwondongkyun
KwondongkyunCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

frontend-review-security

Identify and mitigate security vulnerabilities in React/Next.js codebases.

Updated Aug 27, 2026
Search Tags:#security#react#xss#injection#next.js#code-review#auth
One-click install
npx skills add https://github.com/Kwondongkyun/claude-code-settings --skill frontend-review-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: frontend-review-security
Source: https://github.com/Kwondongkyun/claude-code-settings/tree/main/skills/frontend-review-security
Command: npx skills add https://github.com/Kwondongkyun/claude-code-settings --skill frontend-review-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill guides security-focused code reviews for React and Next.js projects, helping teams identify and remediate common vulnerabilities such as XSS, injection, authentication/authorization flaws, sensitive data exposure, environment variable misconfigurations, and risky dependency usage.

Core Features & Use Cases

  • XSS prevention: identify unsafe DOM updates, improper sanitization, and dangerous HTML insertion.
  • Input validation & data handling: verify user input is validated and sanitized before use.
  • Authentication & authorization checks: ensure server-side enforcement, avoid client-only checks.
  • Sensitive data handling: detect exposure of secrets in code, logs, and configs.
  • Environment variable misuse: highlight secrets in client bundles and unsafe public env vars.
  • Dependency risk assessment: flag vulnerable or untrusted dependencies.

Quick Start

Review a React/Next.js codebase for the items above to begin a secure-by-default code review.

Frequently Asked Questions about frontend-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review React and Next.js code for XSS vulnerabilities?▼

Review React and Next.js code for XSS by identifying unsafe DOM updates, improper sanitization, and dangerous HTML insertion. Check that user input is validated before rendering to prevent cross-site scripting flaws.

What is the best way to prevent sensitive data exposure in Next.js applications?▼

Prevent sensitive data exposure in Next.js by detecting secrets in code, logs, and configs. Highlight environment variable misuse by ensuring secrets are not leaked into client bundles and unsafe public env vars are restricted.

How do I check for authentication and authorization flaws in a React frontend?▼

Check React authentication flaws by ensuring server-side enforcement of auth checks. Avoid client-only authorization validations that attackers can bypass, verifying that secure data handling happens on the server.

Can I assess dependency risks when reviewing my Next.js project security?▼

Yes, you can assess dependency risks in your Next.js project by flagging vulnerable or untrusted dependencies. This identifies risky packages in your codebase that could introduce security flaws during a code review.

Does this security review cover environment variable misconfigurations in React?▼

Yes, this security review covers environment variable misuse in React by highlighting secrets exposed in client bundles and identifying unsafe public env vars. It verifies that sensitive configurations remain server-side only.

Related Skills

Explore More Software Engineering Skills→
tailwind8tailwind8

typescript-security-checker

Diagnose security issues in Next.js/TypeScript projects and generate prioritized remediation reports.

Official
Advanced
pdovhomiljapdovhomilja

Global Validation

Validate and sanitize user input against SQL, XSS, and command injections.

Community
Basic
o2b3ko2b3k

aif-ci

Generate and audit GitHub Actions and GitLab CI pipeline configurations.

Community
Advanced
outfitter-devoutfitter-dev
28

security-engineering

Audit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.

Official
Advanced