skills.rest
erp-mafia
erp-mafiaOFFICIAL
Explore all skills by this author →
GitHub

swarm-security-agent

Audit gnubok web stacks for OWASP Top 10 and Next.js/React security risks.

209|46|Updated Feb 13, 2026
Search Tags:#react#owasp#nextjs#web-security#security-audit#gnubok
One-click install
npx skills add https://github.com/erp-mafia/gnubok --skill swarm-security-agent
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: swarm-security-agent
Source: https://github.com/erp-mafia/gnubok/tree/main/.claude/skills/swarm-security-agent
Command: npx skills add https://github.com/erp-mafia/gnubok --skill swarm-security-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies security weaknesses in gnubok by performing read-only audits that cover OWASP Top 10 and Next.js/React-specific issues.

Core Features & Use Cases

  • Read-only security audits across API routes, middleware, and frontend components to surface misconfigurations and insecure patterns without altering code or data.
  • OWASP Top 10 and Next.js/React-specific checks for issues like XSS, CSRF, insecure deserialization, information disclosure, and configuration flaws.
  • Use case: run an autonomous security sweep on a live gnubok deployment to generate a findings report for security review.

Quick Start

Initiate a read-only security sweep against the gnubok stack to generate a findings report.

Frequently Asked Questions about swarm-security-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a read-only security audit on a Next.js and React web application?▼

Run a read-only security audit by initiating an autonomous sweep against your Next.js and React stack to surface OWASP Top 10 risks and generate a findings report without modifying any code.

What security checks are included for Next.js API routes and middleware?▼

Security checks for Next.js API routes and middleware cover OWASP Top 10 vulnerabilities like XSS, CSRF, insecure deserialization, and information disclosure to surface insecure patterns and configuration flaws.

Can I scan client-rendered React components for security weaknesses without altering the code?▼

Yes, you can scan client-rendered React components for security weaknesses without altering the code, as the audit operates strictly in read-only mode to identify data exposure and misconfigurations.

Does a read-only security audit require creating tickets or applying code changes to fix vulnerabilities?▼

No, a read-only security audit requires no code changes or tickets, functioning purely to surface misconfigurations and insecure patterns across the web stack while leaving the original code untouched.

What is the best way to identify OWASP Top 10 risks in a Next.js deployment?▼

The best way to identify OWASP Top 10 risks is running an autonomous security sweep on your live Next.js deployment, which checks for XSS, CSRF, and configuration flaws to produce a security review report.

Related Skills

Explore More Software Engineering Skills→
AIDotNetAIDotNet
84

nextjs-app

Generate Next.js 14+ App Router components, API routes, and middleware.

Official
Intermediate
rcrathrcrath
1

wayq-regress

Monitor GitHub issues for regressions and report findings in audio format.

Community
Intermediate
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced