Scan JavaScript/TypeScript codebases for dangerous APIs and missing timeouts.
npx skills add https://github.com/cropsgg/skills --skill sharp-edges-cropsgg
Please help me install this Agent Skill. Skill: sharp-edges Source: https://github.com/cropsgg/skills/tree/main/skills/engineering/sharp-edges Command: npx skills add https://github.com/cropsgg/skills --skill sharp-edges-cropsgg
Flag dangerous APIs and misconfigurations such as eval(), exec(), unsafe string interpolation in SQL or Shell, missing fetch timeouts, and use of process.exit() in library code, plus prototype pollution, so teams can surface risk before incidents.
Run a codebase audit to surface unsafe APIs and missing timeouts, and triage findings before deployment.
High-intent search queries and answers about installing and using this skill.
To scan a JavaScript codebase for dangerous APIs, run an audit to identify and flag unsafe patterns like eval, dynamic code execution, and shell or SQL command construction, producing a prioritized findings report for review.
You can detect missing fetch timeouts in a TypeScript project by scanning your codebase to surface external calls lacking timeouts, distinguishing between application and shared library code to guide remediation.
Prototype pollution is an unsafe pattern where shared object prototypes are modified. You can find it during a security audit by scanning your codebase to surface potential prototype pollution and unsafe API usage.
Yes, the dangerous API scan distinguishes library code from application code to guide remediation, applying checks to JavaScript and TypeScript projects to appropriately contextualize shared utility behavior.
Checking for process.exit() in library code is necessary because shared utilities should not terminate the host application. Scanning flags this dangerous API usage so teams can surface risk before incidents occur.
The best way to audit unsafe string interpolation in SQL or Shell commands is to scan the codebase for dangerous function calls and unsafe patterns, generating a prioritized findings report to triage before deployment.
pruiz...
thejefflarsonDetect prototype pollution vulnerabilities in JavaScript and TypeScript code.
AreteDriverImplements CI/CD pipelines using Batcomputer for automated code review and deployment gating.
brenordvAudit software systems for security vulnerabilities and regulatory compliance.
