sc-lang-typescript

Scanning a TypeScript project for security vulnerabilities involves running static analysis to detect anti-patterns and insecure coding practices. This skill automatically reviews TS/JS files across your codebase, providing actionable findings and safe-code examples for remediation.

Common JavaScript security anti-patterns include prototype pollution, DOM-based XSS, and insecure JWT handling. The skill detects these vulnerabilities alongside SSRF and insecure dynamic imports across frontend frameworks like React and backend frameworks like Express.

Yes, static analysis works with both frontend and backend JavaScript ecosystems. The skill applies to TypeScript and JavaScript projects across React, Next.js, Angular, Vue, Express, Fastify, Koa, Nest, and ORMs like Prisma and TypeORM.

To check your Prisma and TypeORM codebase for insecure coding practices, apply a comprehensive security checklist via static analysis. This surfaces language-idiomatic attack vectors and provides actionable findings for your ORM and broader npm ecosystem dependencies.

The best way to detect DOM-based XSS and prototype pollution in a Next.js app is using static analysis to scan for specific TypeScript and JavaScript anti-patterns. The skill enforces a comprehensive checklist to identify these high-severity vulnerabilities and suggest fixes.

Yes, you can scan your Node.js backend for insecure eval and setTimeout usage. The skill detects these specific insecure coding practices across browser and Node.js environments, providing actionable remediation guidance to fix the identified vulnerabilities.