skills.rest
sigmadigitalza
sigmadigitalzaOFFICIAL
Explore all skills by this author →
WebsiteGitHub

web-security

Identifies frontend security vulnerabilities including XSS and CSP issues in web applications.

1|Updated Apr 29, 2026
Search Tags:#security review#web security#CSP compliance#frontend auditing#XSS detection
One-click install
npx skills add https://github.com/sigmadigitalza/engineering-playbook --skill web-security-sigmadigitalza
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web-security
Source: https://github.com/sigmadigitalza/engineering-playbook/tree/main/plugins/sigma-engineering/skills/web-security
Command: npx skills add https://github.com/sigmadigitalza/engineering-playbook --skill web-security-sigmadigitalza

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf2, requests, lxml, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures the security of web applications by conducting a thorough frontend review, identifying and mitigating vulnerabilities related to XSS, CSP, client-side auth, and more.

Core Features & Use Cases

  • Static Code Review: Analyze source code for common security issues, including XSS and CSP violations.
  • Live System Audit: Inspect live web applications for active security threats.
  • Supply Chain Security: Assess third-party scripts and dependencies for potential vulnerabilities.
  • Use Case: For instance, a team preparing to launch a new web application would use this Skill to review the code and production environment for potential security issues before going live.

Quick Start

Utilize the web-security skill to review a web application's frontend security, starting by selecting the mode (Code Review or Live System Audit) and providing the necessary input, such as a commit or a production URL.

Frequently Asked Questions about web-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a frontend security audit for a web application before deployment?▼

A frontend security audit identifies cross-site scripting, CSP violations, and client-side authentication vulnerabilities. You can conduct static code reviews or inspect live web applications for active threats to ensure production readiness.

What is the best way to detect cross-site scripting and CSP compliance issues in frontend frameworks?▼

Detecting cross-site scripting and CSP compliance issues involves analyzing source code for common security flaws. A thorough review of frontend frameworks and content security policies mitigates these active web threats.

Can I inspect a live production URL for client-side authentication issues and active threats?▼

Yes, live system audits inspect production URLs for client-side authentication issues and active security threats. This approach assesses the live application environment directly rather than just reviewing static source code.

Does this frontend security review assess third-party scripts and supply chain dependencies?▼

Yes, frontend security reviews assess third-party scripts and supply chain dependencies. Analyzing these external components identifies potential vulnerabilities introduced into the web application before going live.

What do I need to start a web security review using static code analysis?▼

To start a static code review, you need the source code and an understanding of frontend frameworks. The review focuses on identifying XSS, CSP violations, and client-side authentication issues.

When should I choose a live system audit over static code review for web security?▼

Choose a live system audit to inspect active security threats in a production environment. Choose static code review to analyze source code for XSS and CSP violations before deployment.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-differential-review

Review git diffs for security vulnerabilities across code changes.

Official
Advanced
webdevtodayjasonwebdevtodayjason
7

security-checklist

Identifies and remediates web application security vulnerabilities including OWASP Top 10, SQL injection, XSS, and CSRF.

Community
Advanced
jassicsjassics
6

dependency-supply-chain-review

Review third-party dependencies for typosquatting, dependency confusion, and malicious scripts.

Community
Advanced
Chid0kChid0k

ssti-detect

Detect Server-Side Template Injection vulnerabilities in web applications.

Community
Advanced