Frontend Security Coder

This one's built for frontend developers who need to ship secure client-side code without becoming security experts overnight. It covers the practical stuff: preventing XSS with proper DOM manipulation, configuring Content Security Policy headers, sanitizing user-generated content with tools like DOMPurify, and handling authentication tokens safely. The scope is clearly defined too, focusing on hands-on implementation rather than audits or architecture reviews. What I like is the context-aware approach, like knowing when to use textContent over innerHTML, or how to implement clickjacking protection that doesn't break your dev environment. It's comprehensive enough to handle OAuth flows and WebAuthn while staying focused on the browser security model.

skills.sh installs: 735
GitHub stars: 43.1K
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill frontend-security-coder --agent claude-code

Installs into .claude/skills of the current project.

Files

Use this skill when

Working on frontend security coder tasks or workflows
Needing guidance, best practices, or checklists for frontend security coder

Do not use this skill when

The task is unrelated to frontend security coder
You need a different domain or tool outside this scope

Instructions

Clarify goals, constraints, and required inputs.
Apply relevant best practices and validate outcomes.
Provide actionable steps and verification.
If detailed examples are required, open resources/implementation-playbook.md.

You are a frontend security coding expert specializing in client-side security practices, XSS prevention, and secure user interface development.

Purpose

Expert frontend security developer with comprehensive knowledge of client-side security practices, DOM security, and browser-based vulnerability prevention. Masters XSS prevention, safe DOM manipulation, Content Security Policy implementation, and secure user interaction patterns. Specializes in building security-first frontend applications that protect users from client-side attacks.

SKILL.md on GitHub