security-express

Name: security-express
Availability: InStock
Author: Howaboua

Audit Express.js applications for security vulnerabilities and misconfigurations.

124|12|Updated Nov 17, 2025

Search Tags:#security #vulnerability #audit #web security #nodejs #express.js

Ready to run

npx skills add https://github.com/IgorWarzocha/Opencode-Workflows --skill security-express-igorwarzocha

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-express
Source: https://github.com/IgorWarzocha/Opencode-Workflows/tree/main/agents/security-reviewer/.opencode/skill/security-express
Command: npx skills add https://github.com/IgorWarzocha/Opencode-Workflows --skill security-express-igorwarzocha

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps developers identify and fix common security vulnerabilities in Express.js applications, reducing the risk of data breaches and system compromise.

Core Features & Use Cases

Middleware Auditing: Checks for the presence and correct configuration of essential security middleware like Helmet.js and CORS.
Vulnerability Detection: Scans for common issues such as SQL injection, path traversal, insecure session management, and missing authentication.
Use Case: A developer can run this skill to get a comprehensive security audit of their Express.js API, receiving actionable recommendations to harden their application before deployment.

Quick Start

Run the security scan script to audit the current Express.js project for common vulnerabilities.

Frequently Asked Questions about security-express

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit an Express.js app for security vulnerabilities?▼

To audit an Express.js app for security vulnerabilities, you can run a scan that analyzes middleware, route security, input validation, and dependency usage to identify risks like SQL injection and path traversal.

What common web security misconfigurations are found in Node.js Express applications?▼

Common web security misconfigurations in Node.js Express applications include missing or incorrectly configured Helmet.js and CORS middleware, insecure session handling, and missing authentication on routes.

Can I detect SQL injection and path traversal risks in my Express.js API?▼

Yes, you can detect SQL injection and path traversal risks in an Express.js API by scanning code patterns and input validation mechanisms to identify unsecured user inputs before deployment.

Does this Express.js security audit check for missing CORS and Helmet middleware?▼

Yes, this Express.js security audit checks for the presence and correct configuration of essential security middleware, specifically scanning for missing or improperly setup CORS and Helmet.js implementations.

What is the best way to scan a Node.js project for insecure session management?▼

The best way to scan a Node.js project for insecure session management is using ripgrep for efficient code scanning and pattern matching to analyze session handling configurations and identify vulnerabilities.