skills.rest
vidzza
vidzzaCOMMUNITY
Explore all skills by this author →
GitHub

frontend-security

Audit frontend codebases for XSS, CSRF, and DOM vulnerabilities.

Updated Feb 4, 2026
Search Tags:#security#frontend#xss#owasp#audit#csp#csrf
One-click install
npx skills add https://github.com/vidzza/JRM_SMTR_V- --skill frontend-security-vidzza
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: frontend-security
Source: https://github.com/vidzza/JRM_SMTR_V-/tree/main/.claude/skills/frontend-security
Command: npx skills add https://github.com/vidzza/JRM_SMTR_V- --skill frontend-security-vidzza

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in frontend codebases, protecting against common web attacks and ensuring secure coding practices.

Core Features & Use Cases

  • Vulnerability Scanning: Detects Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and other common web vulnerabilities.
  • Configuration Auditing: Reviews Content Security Policy (CSP) and other security configurations.
  • Dependency Checks: Identifies known vulnerabilities in Node.js/NPM dependencies.
  • Use Case: Before deploying a new feature, use this Skill to perform a security audit on the React codebase to ensure it's protected against common attacks like XSS.

Quick Start

Run a frontend security audit on the current project directory.

Frequently Asked Questions about frontend-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my React codebase for XSS vulnerabilities?▼

To audit React codebases for XSS vulnerabilities, run a frontend security scan targeting web platform, React, Astro, and Twig frameworks to detect DOM vulnerabilities and improper input handling based on OWASP guidelines.

What does a frontend security audit include?▼

A frontend security audit includes scanning for XSS, CSRF, DOM vulnerabilities, and file upload security issues. It also reviews CSP configurations, input handling, and Node.js/NPM dependencies to ensure secure coding practices.

Can I check Node.js and NPM dependencies for known vulnerabilities?▼

Yes, you can check Node.js and NPM dependencies for known vulnerabilities. The security audit identifies risky packages and bad practices within your Node.js and Bun environments to protect against web attacks.

How do I review Content Security Policy and CSRF configurations in my web app?▼

You can review Content Security Policy (CSP) and CSRF configurations by running a configuration auditing scan on your frontend project directory, which validates security settings against OWASP guidelines.

Does this security audit work with Astro and Twig frameworks?▼

Yes, the security audit works with Astro and Twig frameworks. It explicitly targets web platform, React, Astro, Twig, Node.js, and Bun environments to identify security vulnerabilities and bad practices.

Related Skills

Explore More Software Engineering Skills→
AradotsoAradotso
11

npm-security-best-practices

Harden npm, pnpm, and Bun installs against supply-chain attacks.

Official
Advanced
logistics00logistics00

web-security

Identify and remediate web security vulnerabilities across frontend, backend, APIs, and deployment pipelines.

Community
Advanced
SKY-lvSKY-lv

security-testing-agent

Scan code, dependencies, and configurations for security vulnerabilities.

Community
Advanced
uphiagouphiago
1.1k

hunt-llm-ai

Identify exploitable LLM/AI vulnerabilities crossing trust boundaries with validation gates.

Community
Advanced