Conducts systematic security audits of JavaScript and Node.js codebases based on OWASP Top 10 standards.
This skill empowers Claude to perform deep security analysis on JavaScript and Node.js applications, specifically targeting the OWASP Top 10 vulnerabilities. It identifies critical flaws like SQL injection, broken authentication, and sensitive data exposure while providing actionable remediation steps and secure code patterns. Whether you are hardening a legacy service or reviewing new pull requests, this skill ensures your code follows industry-standard security best practices, including dependency scanning and secure header configuration.
主な機能
01OWASP Top 10 vulnerability detection for JS/Node.js
02Automated secrets and PII exposure auditing
03Authentication and JWT security verification
04Dependency vulnerability analysis and remediation
05Secure configuration for CORS, HSTS, and Helmet
060 GitHub stars
ユースケース
01Migrating legacy code to modern secure coding patterns
02Reviewing pull requests for security-sensitive logic
03Hardening Node.js APIs before production deployment
