ts-security-audit

Audit TypeScript and Node.js applications for OWASP-aligned security risks.

1|5|Updated Mar 29, 2026
One-click install
npx skills add https://github.com/mdproctor/cc-praxis --skill ts-security-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ts-security-audit
Source: https://github.com/mdproctor/cc-praxis/tree/main/ts-security-audit
Command: npx skills add https://github.com/mdproctor/cc-praxis --skill ts-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides structured, opinionated security reviews for TypeScript and Node.js applications, enabling teams to identify and remediate OWASP Top 10 risks before deployment.

Core Features & Use Cases

  • Checklist-driven assessment: Applies OWASP Top 10 categories to TS/Node codebases with severity-graded findings.
  • Scope-aware analysis: Supports full project audits, feature PR reviews, and security-critical subsystem checks (authentication, data handling).
  • Actionable remediation: Produces prioritized findings and concrete fixes aligned with best practices and tooling.
  • Report generation: Outputs a reproducible security report suitable for integration into incident-response and governance workflows.

Quick Start

Run a security review on your TS/Node project by invoking ts-security-audit with the desired scope.

Frequently Asked Questions about ts-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a TypeScript Node.js application for OWASP security vulnerabilities?

A TypeScript security audit applies OWASP Top 10 checks to Node.js applications, identifying risks with severity-graded findings. It assesses codebases against best-practice patterns to enforce an end-to-end remediation workflow.

How do I review a feature PR for security risks in a Node.js codebase?

Scope-aware security analysis supports feature PR reviews by applying checklist-driven assessments to the changed code. It outputs prioritized findings and concrete fixes to mitigate vulnerabilities before deployment.

Can I generate a compliance report for security findings in TypeScript applications?

Yes, the audit workflow produces a reproducible security report with severity-based findings and remediation guidance. This report is suitable for integration into governance, incident-response, and compliance workflows.

What is the best way to check authentication and data handling subsystems for Node.js vulnerabilities?

Checklist-driven assessments target security-critical subsystems like authentication and data handling in Node.js. The audit evaluates these areas using OWASP-aligned checks and best-practice patterns to identify and mitigate risks.

Does this security audit cover the full OWASP Top 10 for TypeScript projects?

The audit applies OWASP Top 10 categories to TypeScript and Node.js codebases, generating severity-graded findings. It enforces an end-to-end workflow that aligns with best-practice patterns and tooling to ensure comprehensive coverage.