skills.rest
schalkneethling
schalkneethlingCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

frontend-security

Audit frontend codebases for security vulnerabilities and anti-patterns.

7|Updated Dec 26, 2025
Search Tags:#OWASP#security#frontend#XSS#audit#CSP#CSRF
One-click install
npx skills add https://github.com/schalkneethling/webdev-agent-skills --skill frontend-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: frontend-security
Source: https://github.com/schalkneethling/webdev-agent-skills/tree/main/frontend-security
Command: npx skills add https://github.com/schalkneethling/webdev-agent-skills --skill frontend-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill guides secure frontend development by identifying common vulnerabilities and bad practices across web projects, from vanilla JS to modern frameworks.

Core Features & Use Cases

  • XSS/CSRF detection: Identify risky patterns and incorrect defenses in client-side code and templates.
  • CSP and security headers review: Evaluate Content Security Policy setup and related headers for robust defense.
  • Dependency security checks: Assess NPM/JS dependencies for known vulnerabilities and risky transitive chains.
  • Guided remediation patterns: Provide actionable fixes and references for each finding.

Quick Start

Run an automated frontend security audit against the repository to surface high-priority issues and recommended mitigations.

Frequently Asked Questions about frontend-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an XSS audit on a React frontend codebase?▼

A frontend security audit detects XSS and CSRF vulnerabilities by evaluating risky patterns in client-side code. It checks input handling, CSP configurations, and dependency risks, relying on OWASP guidance to provide actionable remediation references.

How do I check Content Security Policy headers for my web project?▼

To check Content Security Policy headers, the skill reviews your CSP setup and related security headers for robust defense. It evaluates configurations against OWASP guidance and outputs structured findings to correct any weaknesses.

Does this frontend security audit work with Astro and Twig templates?▼

Yes, this security audit supports Astro and Twig templates alongside React, vanilla JS, and Node.js projects. It evaluates these codebases for XSS and CSRF patterns, CSP configurations, and dependency risks to surface high-priority issues.

What is the best way to assess NPM dependencies for known vulnerabilities?▼

Assessing NPM dependencies for known vulnerabilities involves checking packages for risky transitive chains. This skill evaluates your JS dependencies during the frontend security audit and outputs structured findings for remediation.

Why do I need a CSRF defense review for my Node.js project?▼

A CSRF defense review is needed to identify incorrect CSRF protections in your Node.js project. The audit evaluates client-side code and templates against OWASP guidance to ensure your defenses are correctly implemented and robust.

Related Skills

Explore More Software Engineering Skills→
vikingokftvikingokft

frontend-security

Audit frontend codebases for XSS, CSRF, CSP, and DOM vulnerabilities.

Official
Intermediate
hoangminh46hoangminh46

web-security-frontend

Secure frontend web applications against XSS, CSRF, and insecure headers.

Community
Basic
AndyHsuTWAndyHsuTW

django-verification

Automate Django project verification with linters, security scanners, and tests.

Community
Advanced
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced