Skip to main content

twd-setup

Guides users in setting up TWD for in-browser validation in SPAs, ensuring proper installation and configuration for various frameworks.

Install this skill

or
80/100

Security score

The twd-setup skill was audited on Mar 1, 2026 and we found 8 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 16

Access to .env file

SourceSKILL.md
16- **Dev-only scope**: All TWD code is guarded by `import.meta.env.DEV` and is tree-shaken out of production builds. TWD never runs in production.
low line 45

Access to .env file

SourceSKILL.md
45if (import.meta.env.DEV) {
low line 71

Access to .env file

SourceSKILL.md
71if (import.meta.env.DEV) {
low line 87

Access to .env file

SourceSKILL.md
87if (import.meta.env.DEV) {
low line 114

Access to .env file

SourceSKILL.md
114if (import.meta.env.DEV) {
medium line 181

Access to .env file

SourceSKILL.md
181- **Dev dependency**: Installed with `--save-dev` and guarded by `import.meta.env.DEV` — never included in production builds.
low line 205

Access to .env file

SourceSKILL.md
205// Add inside your import.meta.env.DEV block, after initTWD:
medium line 271

Access to .env file

SourceSKILL.md
271- Verify `import.meta.env.DEV` is true (dev mode)
Scanned on Mar 1, 2026
View Security Dashboard
Installation guide →