frontend-security

Audit frontend codebases for security vulnerabilities and bad practices. Use when performing security reviews, auditing code for XSS/CSRF/DOM vulnerabilities, checking Content Security Policy configurations, validating input handling, reviewing file upload security, or examining Node.js/NPM dependencies. Target frameworks include web platform (vanilla HTML/CSS/JS), React, Astro, Twig templates, Node.js, and Bun. Based on OWASP security guidelines.

$ Installer

git clone https://github.com/schalkneethling/webdev-agent-skills /tmp/webdev-agent-skills && cp -r /tmp/webdev-agent-skills/frontend-security ~/.claude/skills/webdev-agent-skills

// tip: Run this command in your terminal to install the skill