security_agent

Review Node.js and React applications for OWASP Top 10 vulnerabilities.

15|6|Updated Jan 5, 2026
One-click install
npx skills add https://github.com/lionbenjamin/agent-templates --skill security-agent
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_agent
Source: https://github.com/lionbenjamin/agent-templates/tree/main/skills/security_agent
Command: npx skills add https://github.com/lionbenjamin/agent-templates --skill security-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a thorough security review of Node.js and React codebases, identifying vulnerabilities, misconfigurations, and insecure patterns to reduce risk and exposure.

Core Features & Use Cases

  • OWASP alignment: map findings to OWASP Top 10 categories and provide prioritized fixes.
  • Actionable remediation: deliver concrete code changes, config hardening steps, and dependency updates.
  • Automation-ready outputs: generate structured reports suitable for ticketing, risk scoring, and audit trails.

Quick Start

Run the security_agent skill on your project to perform a full security review and generate a prioritized remediation plan.

Frequently Asked Questions about security_agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 security review on a Node.js and React codebase?

To run an OWASP Top 10 security review on your Node.js and React codebase, apply the security agent to your repository. It maps identified vulnerabilities to OWASP categories, scores risks, and generates a prioritized remediation plan across authentication, configuration, and dependencies.

What is the best way to find vulnerabilities in React and Node.js authentication workflows?

The best way to find vulnerabilities in React and Node.js authentication workflows is to perform a comprehensive security review. This process analyzes authorization logic, maps insecure patterns to OWASP categories, and delivers actionable code changes to harden authentication mechanisms.

Can I use automated security scanning for dependency checks and CI/CD pipeline configuration?

Yes, you can automate security scanning for dependency checks and CI/CD pipeline configuration. The review process evaluates deployment workflows and security configurations, producing structured reports suitable for ticketing, risk scoring, and audit trails.

Does this security review generate actionable remediation recommendations for code and dependencies?

Yes, the security review generates actionable remediation recommendations for code and dependencies. It delivers concrete code changes, configuration hardening steps, and dependency updates to resolve identified vulnerabilities and reduce exposure.

How do I assess security risk scores and vulnerability reports for a Node.js application?

To assess security risk scores and vulnerability reports for a Node.js application, execute a full security review. The analysis evaluates misconfigurations and insecure patterns, producing structured outputs with risk scoring and vulnerability reporting mapped to OWASP Top 10 categories.