security-review

Review JavaScript/Node.js code for OWASP Top 10 vulnerabilities and dependency security.

1|Updated Mar 6, 2026

Search Tags:#code review #security #vulnerability #owasp #javascript #nodejs

Ready to run

npx skills add https://github.com/chavangorakh1999/sde-skills --skill security-review-chavangorakh1999

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/chavangorakh1999/sde-skills/tree/main/sde-code-quality/skills/security-review
Command: npx skills add https://github.com/chavangorakh1999/sde-skills --skill security-review-chavangorakh1999

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically analyzes JavaScript/Node.js code for security vulnerabilities, ensuring adherence to best practices and mitigating risks from common threats.

Core Features & Use Cases

OWASP Top 10 Analysis: Detailed checks for injection, broken authentication, sensitive data exposure, and more.
Secrets Audit: Guidance on identifying and managing secrets within your codebase.
Dependency Vulnerability Scan: Recommendations for identifying and addressing vulnerable packages.
Use Case: Before deploying a new feature or after a significant code change, run this Skill to proactively identify and fix potential security flaws, preventing breaches and protecting user data.

Quick Start

Run a security review on the provided code snippet.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find OWASP Top 10 vulnerabilities in Node.js code?▼

To find OWASP Top 10 vulnerabilities in Node.js code, this security review analyzes your codebase for injection flaws, broken authentication, and sensitive data exposure. It provides detailed findings with attack scenarios, impact assessments, and specific remediation steps.

Can I scan JavaScript code for secrets and dependency vulnerabilities?▼

Yes, you can scan JavaScript code for secrets and dependency vulnerabilities. The review identifies hardcoded secrets within your codebase and checks for known vulnerabilities in your installed packages, offering recommendations to address exposed credentials and at-risk dependencies.

What is the best way to check for broken access control in JavaScript applications?▼

The best way to check for broken access control in JavaScript applications is to run a comprehensive security review. It systematically detects access control issues and misconfigurations, detailing potential attack scenarios and providing actionable steps to secure your application.

Does this security review work for both JavaScript and Node.js environments?▼

Yes, this security review works for both JavaScript and Node.js environments. It is specifically designed to analyze JavaScript and Node.js code, targeting security flaws relevant to these platforms including injection flaws, authentication weaknesses, and data exposure.

How do I remediate injection flaws found during a code review?▼

To remediate injection flaws found during a code review, follow the detailed remediation steps provided in the security findings. The review output pairs each detected injection vulnerability with an attack scenario and an impact assessment to guide your secure code fixes.

When should I run a security review on my codebase?▼

You should run a security review on your codebase before deploying a new feature or after a significant code change. This proactive approach identifies and fixes potential security flaws, preventing breaches and protecting user data.