typescript-security-review

Analyze TypeScript/Node.js code and configurations for OWASP vulnerabilities.

Updated May 17, 2026
One-click install
npx skills add https://github.com/cenjie/skills --skill typescript-security-review-cenjie
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: typescript-security-review
Source: https://github.com/cenjie/skills/tree/main/skills/typescript-security-review
Command: npx skills add https://github.com/cenjie/skills --skill typescript-security-review-cenjie

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security review for TypeScript/Node.js applications to identify vulnerabilities and misconfigurations before deployment.

Core Features & Use Cases

  • Scans for OWASP Top 10 patterns across code and configurations, including XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure.
  • Provides severity classifications (Critical, High, Medium, Low) and remediation examples; delegates deep analysis to the typescript-security-expert agent.
  • Covers framework-specific security reviews for Express, NestJS, and Next.js, with guidance for production readiness.
  • Use Case: Before production, audit a NestJS REST API to verify secure authentication, headers, and dependency integrity.

Quick Start

Initiate a security review on the current TypeScript/Node.js project and return a prioritized remediation report.

Frequently Asked Questions about typescript-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a TypeScript Node.js application for OWASP vulnerabilities?

To audit a TypeScript Node.js application for OWASP vulnerabilities, run a comprehensive security review that scans code and configurations for XSS, injection, CSRF, and JWT/OAuth2 flaws, returning severity classifications and remediation examples.

Can I perform a security review on a NestJS project before deployment?

Yes, you can perform a security review on a NestJS project before deployment to verify secure authentication, headers, and dependency integrity, ensuring production readiness and OWASP compliance for your REST API.

What does a TypeScript security audit check for in Express and Next.js projects?

A TypeScript security audit checks Express and Next.js projects for OWASP Top 10 patterns including XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure across both code and configurations.

How do I check my Node.js dependencies for CVEs and secrets exposure?

To check Node.js dependencies for CVEs and secrets exposure, initiate an automated security review that analyzes your project's dependency tree and configurations, providing a prioritized remediation report with severity classifications.

Does automated security review provide actionable remediation guidance for found vulnerabilities?

Yes, automated security review provides actionable remediation guidance for found vulnerabilities by classifying issues as Critical, High, Medium, or Low and offering concrete remediation examples to fix identified security flaws.

What's the best way to verify production readiness for TypeScript API authentication?

The best way to verify production readiness for TypeScript API authentication is to conduct a pre-deployment security audit that analyzes JWT/OAuth2 implementations and headers to identify and resolve authentication misconfigurations.