Accelint Security Best Practices

A systematic security auditor that walks through your JavaScript/TypeScript codebase looking for OWASP Top 10 vulnerabilities. It catches the usual suspects like hardcoded secrets, SQL injection risks, missing auth checks, and tokens stored in localStorage. The workflow is smart: it discovers issues, categorizes them by severity, then references specific fix patterns. What I like is the two-mode approach. Ask for an audit and you get a report to review before changing anything. Trigger it during feature work and it fixes vulnerabilities inline without ceremony. The progressive disclosure design keeps context usage low by loading detailed examples only when needed. Solid for pre-deployment checks or whenever you're adding auth, APIs, or file uploads.

skills.sh installs: 323
GitHub stars: 25
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add gohypergiant/agent-skills --skill accelint-security-best-practices --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Best Practices

Systematic security auditing and vulnerability detection for JavaScript/TypeScript applications. Combines audit workflow with OWASP Top 10 security patterns for production-ready code.

Framework-Agnostic Guidance: This skill provides security principles applicable across frameworks (Express, Fastify, Nest.js, Next.js, etc.). Code examples illustrate concepts using common patterns—adapt them to your project's specific framework and package manager (npm, yarn, pnpm, bun).

NEVER Do When Implementing Security

Note: For general best practices (type safety, code quality, documentation), use the respective accelint skills. This section focuses exclusively on security-specific anti-patterns.

SKILL.md on GitHub