typescript-security-review

Audit TypeScript code for security vulnerabilities like XSS and injection.

Updated Oct 11, 2025
One-click install
npx skills add https://github.com/bromanko/llm-agents --skill typescript-security-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: typescript-security-review
Source: https://github.com/bromanko/llm-agents/tree/main/skills/typescript-security-review
Command: npx skills add https://github.com/bromanko/llm-agents --skill typescript-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and fix security vulnerabilities in TypeScript code, protecting against common web exploits and ensuring robust application security.

Core Features & Use Cases

  • Vulnerability Scanning: Detects common security flaws like XSS, injection vulnerabilities, and insecure dependency usage.
  • Code Auditing: Provides in-depth analysis of input validation, authentication, and secrets management.
  • Use Case: A developer needs to ensure their new API endpoint is secure before deployment. They use this skill to perform a comprehensive security audit, identifying and rectifying potential risks.

Quick Start

Run /review typescript security to start an interactive security review.

Frequently Asked Questions about typescript-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TypeScript code for security vulnerabilities?

To audit TypeScript code for security vulnerabilities, you can run an interactive review that detects common flaws like XSS, injection risks, and insecure data handling. It analyzes input validation, authentication, and dependency hygiene to ensure robust web application security.

What security risks should I check for in a TypeScript API endpoint?

When checking security risks in a TypeScript API endpoint, focus on input validation, authentication, authorization, and dependency hygiene. Comprehensive scanning helps identify and rectify injection vulnerabilities, XSS, and insecure data handling before deployment.

How does a TypeScript security review handle false positives?

A TypeScript security review handles false positives by adhering to shared security review guidelines and TypeScript-specific false-positive rules. This ensures accurate vulnerability detection and minimizes irrelevant warnings during the audit process.

Can I use this security audit for web applications and APIs?

Yes, you can use this security audit for web applications and APIs. The review focuses on addressing risks such as XSS, injection, and insecure data handling specifically within TypeScript web applications and API endpoints.