js-code-analysis

To scan JavaScript projects for security vulnerabilities, this skill applies AST patterns to detect issues like prototype pollution, SSRF, and XSS. It maps routes and generates findings with proof-of-concept examples and remediation guidance in JSON or Markdown formats.

Yes, you can detect NoSQL and SQL injection in Express.js applications using framework-aware scanning. The analysis maps routes and identifies risky patterns to produce actionable findings with specific remediation tips for your web security review.

AST pattern matching for JavaScript code analysis is a technique that parses code structure to identify risky security patterns like command injection and XSS. It aggregates matches to map endpoints and generate structured reports for bug bounty workflows.

Yes, this static code analysis tool supports Next.js route mapping to identify endpoints and apply framework-specific security checks. It scans your codebase to detect vulnerabilities and outputs structured JSON or readable Markdown reports for stakeholder communication.

Automating bug bounty workflows for TypeScript security reviews involves using specialized code analysis to detect vulnerabilities like IDOR and XSS. This skill applies curated security patterns to generate actionable findings with proof-of-concept examples and remediation guidance.

AST pattern matching for web security code analysis relies on predefined structural rules, meaning it may miss complex runtime vulnerabilities or dynamic code execution issues. It focuses on detecting known patterns like prototype pollution and injection flaws in JavaScript and TypeScript projects.