
Typescript Security Review
This one runs systematic security audits on TypeScript and Node.js codebases, checking for OWASP Top 10 issues like XSS, injection flaws, and auth problems. It works through a structured checklist: scanning for hardcoded secrets, verifying JWT configurations, checking that all database queries are parameterized, confirming input validation schemas exist for every endpoint, and running npm audit for dependency CVEs. The output is a severity-ranked report with code examples showing both vulnerable and fixed versions. Use it before production deploys, when reviewing auth implementations, or when you need to validate Express, NestJS, or Next.js security configurations. The checkpoint system keeps the review methodical rather than surface-level.
- skills.sh installs
- 4.1K
- GitHub stars
- 369
- last updated
- Aug 21, 2026
Install
$ npx -y skills add giuseppe-trisciuoglio/developer-kit --skill typescript-security-review --agent claude-codeInstalls into .claude/skills of the current project.
Files
TypeScript Security Review
Overview
Security review for TypeScript/Node.js applications. Evaluates code against OWASP Top 10, framework-specific patterns, and production-readiness criteria. Findings are classified by severity (Critical, High, Medium, Low) with remediation examples. Delegates to the typescript-security-expert agent for deep analysis.
When to Use
- Performing security audits on TypeScript/Node.js codebases
- Reviewing authentication and authorization implementations (JWT, OAuth2, Passport.js)
- Checking for common vulnerabilities (XSS, injection, CSRF, path traversal)
- Validating input validation and sanitization logic
- Reviewing dependency security (npm audit, known CVEs)
- Checking secrets management and environment variable handling
- Assessing API security (rate limiting, CORS, security headers)
- Reviewing Express, NestJS, or Next.js security configurations
- Before deploying to production or after significant code changes
- Compliance checks (GDPR, HIPAA, SOC2 data handling requirements)
Instructions
Sponsors
Details
- Repository
- github.com/giuseppe-trisciuoglio/developer-kit
- Categories
- Frontend Development, Backend & APIs, Security, Git & Pull Requests, Code Review & Quality
- First seen
- May 16, 2026
More from giuseppe-trisciuoglio/developer-kit
All 102- Nextjs App Router4K
- Spring Boot Crud Patterns4K
- Chunking Strategy4K
- Spring Boot Event Driven Patterns4K
- Zod Validation Utilities4K
- Nestjs Best Practices4K
- Nestjs Code Review4K
- Spring Boot Cache4K
- Spring Boot Resilience4j3.9K
- Unit Test Service Layer3.9K
- Nextjs Code Review3.9K
- Spring Ai Mcp Server Patterns3.9K
- Unit Test Wiremock Rest Api3.9K
- Spring Boot Actuator3.9K
- Nextjs Authentication3.9K
- Spring Boot Dependency Injection3.9K
- Unit Test Controller Layer3.9K
- Unit Test Parameterized3.9K
- Unit Test Json Serialization3.9K
- Spring Boot Saga Pattern3.9K
- Spring Data Neo4j3.9K
- Unit Test Security Authorization3.9K
- Nextjs Data Fetching3.9K
- Langchain4j Tool Function Calling Patterns3.9K