security-review-owasp-nodejs-security

What problem does it solve?

This Skill helps reviewers spot Node.js security weaknesses that can lead to privilege sprawl, unsafe defaults, exposed control surfaces, or dependency-driven compromise.

Core Features & Use Cases

• Runtime and privilege review: Inspect service accounts, process permissions, and management access for least-privilege gaps.
• Deployment and isolation analysis: Evaluate containers, tenants, environment boundaries, and configuration drift across local, CI/CD, staging, and production.
• Dependency and supply-chain checks: Assess third-party modules, plugin trust, pinning, provenance, and update discipline.
• Use case: Apply it when reviewing a Node.js API, worker, or platform service to produce evidence-based findings with severity and remediation guidance.

Quick Start

Ask this skill to review a Node.js service, configuration set, or deployment flow for OWASP security issues.