frontend-review-security

Audit frontend codebases for security risks using audit-security.sh.

320|3|Updated Apr 24, 2026
One-click install
npx skills add https://github.com/mizchi/skills --skill frontend-review-security-mizchi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: frontend-review-security
Source: https://github.com/mizchi/skills/tree/main/frontend/review-security
Command: npx skills add https://github.com/mizchi/skills --skill frontend-review-security-mizchi

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Audits frontend codebases to identify and remediate security risks such as dangerous HTML patterns, insecure environment variable exposure, and weak auth/data-handling practices.

Core Features & Use Cases

  • Static analysis for risky HTML sinks, env var exposure in client bundles, and insecure data handling.
  • Authentication & Authorization review covering token storage, route guards, and session management.
  • AI self-pentest guidance to mentally simulate common vulnerability patterns and provide remediation suggestions.
  • Staging considerations with a configurable checklist to validate deployment boundaries and headers.

Quick Start

Run the security audit script against the client repository to produce the security report and follow up on findings.

Frequently Asked Questions about frontend-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my frontend codebase for security risks like env var exposure and insecure token storage?

You can perform static analysis on your client repository to identify risky HTML patterns, environment variable exposure, and insecure data handling by running an automated security audit script that generates a detailed findings report.

What is frontend static analysis for security and what vulnerabilities does it check?

Frontend static analysis for security scans source code to identify risky HTML sinks, client bundle environment variable exposure, insecure token storage, and weak route guards before the application is deployed.

How do I review frontend authentication and authorization mechanisms like route guards and session management?

Review frontend authentication and authorization by evaluating token storage vulnerabilities, validating route guards, and assessing session management configurations against a structured staging checklist to ensure secure client boundaries.

Can I run an AI self-pentest to mentally simulate common vulnerability patterns in my web application?

Yes, you can use AI self-pentest guidance to mentally simulate common vulnerability patterns across development, staging, and production environments, generating targeted remediation suggestions for identified frontend risks.

Does the security audit script work across development, staging, and production environments?

Yes, the security audit script applies static analysis, authentication reviews, and AI self-pentest checks across development, staging, and production environments, using a configurable checklist to validate deployment boundaries and headers.