coeditor
Enables the creation of AI-powered collaborative editing applications using React, enhancing user experience with real-time assistance.
Install this skill
Security score
The coeditor skill was audited on Mar 8, 2026 and we found 14 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 866 | const response = await fetch(`${this.baseUrl}/copilot`, { |
Template literal with variable interpolation in command context
| 875 | throw new Error(`API error: ${response.statusText}`); |
Template literal with variable interpolation in command context
| 949 | ```yaml |
Template literal with variable interpolation in command context
| 1068 | `Improve this text: ${selection.text}` |
Fetch to external URL
| 1039 | const response = await fetch('/api/copilot/stream', { |
Access to .env file
| 49 | # Will need to be configured in .env |
Access to .env file
| 214 | ├── .env.example |
Access to .env file
| 934 | Create `.env.example`: |
Access to .env file
| 1221 | 1. ✅ Configure environment variables (.env) |
External URL reference
| 314 | // runtimeUrl="http://localhost:8000/copilot" |
External URL reference
| 560 | allow_origins=["http://localhost:5173"], # Vite dev server |
External URL reference
| 861 | constructor(baseUrl: string = 'http://localhost:8000') { |
External URL reference
| 937 | VITE_API_URL=http://localhost:8000 |
External URL reference
| 959 | - VITE_API_URL=http://backend:8000 |