sdcorejs-review-security-angular-portal

What problem does it solve?

This Skill finds Angular Portal front-end security weaknesses that can create security exposure even when cross-track baselines exist, reducing the chance that the UI assumes protection the backend must enforce.

Core Features & Use Cases

• Cross-track baseline + Angular Portal checks: Runs review/security/shared.md first, then adds Angular Portal-specific probes for route guards, injection sinks, token storage, and production build hygiene.
• Security finding severity with OWASP mapping: Produces Critical/Important/Minor findings tied to OWASP Top-10 categories.
• Deterministic evidence via Grep: Flags issues with file/line grep evidence and includes manual checks for items that cannot be reliably automated.
• Use cases: Pre-release security gate, after adding routes, introducing [innerHTML], adding interceptors, or integrating third-party widgets.

Quick Start

Use the skill to audit an Angular Portal security posture by running the shared baseline and then checking for missing route guards, XSS sinks (bypassSecurityTrust*, [innerHTML]), token storage choices, interceptor ordering, and prod configuration leaks.