reviewing-frontend-security

Review React/Next.js/TypeScript frontend code for XSS, token exposure, and unsafe rendering.

Updated Apr 14, 2026
One-click install
npx skills add https://github.com/somachak/claude-code-skills-db --skill reviewing-frontend-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reviewing-frontend-security
Source: https://github.com/somachak/claude-code-skills-db/tree/main/skills/frontend/reviewing-frontend-security
Command: npx skills add https://github.com/somachak/claude-code-skills-db --skill reviewing-frontend-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviews browser-facing code for XSS, token exposure, unsafe rendering, insecure storage, and client-side trust mistakes. Use when handling user content, auth state, embeds, or rich text.

Core Features & Use Cases

  • Provides a decision framework for React/Next.js/TypeScript to sanitize inputs, prevent dangerous rendering, and manage token storage securely.
  • Includes a checklist for auditing dependencies, CSP headers, storage strategies, and safe rendering practices across frontend code.
  • Supports use cases such as reviewing new features, third-party integrations, and sensitive UI components to ensure client-side trust and security.

Quick Start

Review your next frontend feature by applying the decision framework and checklist to your codebase.

Frequently Asked Questions about reviewing-frontend-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review React code for XSS and unsafe rendering vulnerabilities?

To review React code for XSS and unsafe rendering vulnerabilities, apply a decision framework that checks for dangerous rendering patterns and verifies input sanitization. This process identifies client-side trust mistakes in browser-facing code.

What is the best way to secure authentication tokens in Next.js client-side storage?

Securing authentication tokens in Next.js client-side storage requires evaluating storage strategies to prevent token exposure. A security checklist helps identify insecure storage practices and ensures sensitive authentication state remains protected.

How do I prevent XSS when handling user content and rich text in a TypeScript frontend?

Preventing XSS when handling user content and rich text in a TypeScript frontend involves applying concrete sanitization guidance. This ensures user-generated content is safely processed without introducing unsafe rendering vulnerabilities.

Does this frontend security review approach work for auditing third-party integrations and dependencies?

Yes, this frontend security review approach works for auditing third-party integrations and dependencies. The included checklist guides you through dependency auditing and evaluating embeds to harden client-side security.

How do I configure Content Security Policy (CSP) headers to harden UI trust?

Configuring Content Security Policy (CSP) headers to harden UI trust involves applying concrete guidance on CSP usage within your frontend review. This mitigates client-side trust mistakes and secures browser-facing code.