skills.rest
djankies
djankiesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

reviewing-security

Detect security vulnerabilities in JavaScript/TypeScript codebases with Semgrep and pattern checks.

Updated Nov 21, 2025
Search Tags:#security#authentication#vulnerability#xss#sql-injection#scanning#semgrep
One-click install
npx skills add https://github.com/djankies/claude-configs --skill reviewing-security-djankies
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: reviewing-security
Source: https://github.com/djankies/claude-configs/tree/main/review/skills/reviewing-security
Command: npx skills add https://github.com/djankies/claude-configs --skill reviewing-security-djankies

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires semgrep, and includes scripts (resource) components.

What problem does it solve?

This Skill provides automated tooling and detection patterns to identify JavaScript/TypeScript security vulnerabilities. It includes commands, vulnerability patterns, and severity mappings—guiding WHAT to check and HOW to detect issues, not formatting or workflow.

Core Features & Use Cases

  • Automated security analysis with Semgrep (if available) and a ready-to-run script.
  • Pattern-based detection for common issues (XSS, SQL injection, command injection, path traversal, code injection, hard-coded credentials, etc.).
  • Use Case: Quickly establish a security baseline for Node.js, React, and TS codebases with repeatable checks.

Quick Start

Run the security scan script: bash ~/.claude/plugins/marketplaces/claude-configs/review/scripts/review-security.sh

Frequently Asked Questions about reviewing-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect security vulnerabilities in JavaScript and TypeScript code?▼

Security vulnerability detection in JavaScript and TypeScript uses automated scanning tools like Semgrep to identify patterns for XSS, SQL injection, command injection, path traversal, code injection, hardcoded credentials, and secret exposure. Run the security scan script to produce findings with severity levels, file locations, and CWE/OWASP references.

What types of security issues can automated scanning catch in my codebase?▼

Automated scanning detects XSS, SQL injection, command injection, path traversal, code injection, hardcoded credentials, and secret exposure. Semgrep-based pattern matching identifies these vulnerabilities across JavaScript and TypeScript repositories and maps findings to CWE and OWASP standards.

Can I use this security scanner with Node.js and React projects?▼

Yes, this Skill establishes security baselines for Node.js, React, and TypeScript codebases with repeatable pattern-based checks. It works on any JavaScript or TypeScript repository where Semgrep is available or fallback grep-based detection is enabled.

What do I need to run automated security scanning on my code?▼

Semgrep is required as a dependency for pattern-based vulnerability detection. The Skill provides ready-to-run scripts and vulnerability patterns; execute the scan script to analyze your JavaScript or TypeScript codebase and generate findings with severity and location data.

How do I get started with security scanning my repository?▼

Run the security scan script at ~/.claude/plugins/marketplaces/claude-configs/review/scripts/review-security.sh to begin automated analysis. The script applies Semgrep patterns to detect vulnerabilities and outputs findings with file locations, severity, and CWE/OWASP mappings.

Related Skills

Explore More Software Engineering Skills→
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
dnvitidnviti
10

vulnerability-create

Generate structured remediation tasks from security vulnerability findings with severity classification.

Community
Intermediate
vertivolatamvertivolatam
1

Static Analysis

Run static analysis across multiple programming languages with linters and security scanners.

Official
Advanced
ToanPV90ToanPV90

sast-scanning

Detects source code vulnerabilities via static analysis with JSON/SARIF outputs.

Community
Advanced