security-review-owasp-prototype-pollution-prevention
CommunityStop prototype pollution before it spreads.
Software Engineering#owasp#javascript#security review#nodejs#deep merge#prototype pollution#object inheritance
Authorsjinks
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill helps reviewers find prototype pollution weaknesses in JavaScript and Node.js applications before attacker-controlled object paths can alter behavior, authorization, or runtime state.
Core Features & Use Cases
- Risk Tracing: Follows untrusted data through object creation, deep merge logic, clone utilities, and property assignment paths.
- Security Review Guidance: Checks for dangerous keys, inherited property abuse, and missing hardening controls such as null-prototype objects or runtime mitigations.
- Use Case: Review a Node.js service that parses JSON or query parameters and determine whether crafted input could poison shared prototypes and affect later requests.
Quick Start
Ask the skill to review the selected codebase for prototype pollution risks in object creation, deep merges, and property assignment paths.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: security-review-owasp-prototype-pollution-prevention Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-prototype-pollution-prevention Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.