typescript-security-review

Review TypeScript/Node.js projects for vulnerabilities and misconfigurations.

Updated Sep 10, 2025

Search Tags:#typescript #security #vulnerability #owasp #audit #node.js

Ready to run

npx skills add https://github.com/tillysoso/mv1 --skill typescript-security-review-tillysoso

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: typescript-security-review
Source: https://github.com/tillysoso/mv1/tree/main/.claude/skills/typescript-security-review
Command: npx skills add https://github.com/tillysoso/mv1 --skill typescript-security-review-tillysoso

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

TypeScript and Node.js security reviews identify vulnerabilities, insecure configurations, and OWASP-pattern gaps across codebases to reduce risk before deployment.

Core Features & Use Cases

Framework- and pattern-specific checks for Express, NestJS, and Next.js applications.
Validation of authentication/authorization implementations, input validation, secret management, and security headers.
Guidance with severity classifications and remediation examples for production-readiness improvements.

Quick Start

Run a security review pass on your TypeScript project to surface vulnerabilities and misconfigurations.

Frequently Asked Questions about typescript-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security audit on a TypeScript Node.js project?▼

Perform a security audit on a TypeScript Node.js project by scanning codebases to identify vulnerabilities, insecure configurations, and OWASP-pattern gaps. This targets authentication, input validation, and dependency security across Express, NestJS, and Next.js stacks to produce severity-classified findings.

What is the best way to check for OWASP vulnerabilities in a NestJS application?▼

Checking for OWASP vulnerabilities in a NestJS application involves running a framework-specific security review. It validates authorization implementations, input validation, secret management, and security headers, generating an overall security posture assessment with remediation examples.

Does the security review work with Next.js and Express stacks?▼

Security reviews work with Next.js and Express stacks. They perform framework-specific checks across TypeScript and Node.js applications to identify misconfigurations and security gaps, providing remediation examples for production-readiness improvements.

How do I find secrets handling and dependency security risks before deployment?▼

Find secrets handling and dependency security risks before deployment by running a security review pass on your TypeScript project. This surfaces vulnerabilities and misconfigurations, producing a structured report with severity-classified findings and an overall posture assessment.