typescript-security
Enhances TypeScript applications by validating input, securing authentication, and preventing injection attacks for robust security.
Install this skill
or
55/100
Security score
The typescript-security skill was audited on Jun 6, 2026 and we found 3 security issues across 2 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
critical line 49
Direct command execution function call
SourceSKILL.md
| 49 | - **No shell string interpolation**: Never use `execSync(\`cmd ${userInput}\`)`or interpolate environment variables / config values into`execSync`/`spawnSync`strings. Shell metacharacters cause **comm |
high line 49
Template literal with variable interpolation in command context
SourceSKILL.md
| 49 | - **No shell string interpolation**: Never use `execSync(\`cmd ${userInput}\`)`or interpolate environment variables / config values into`execSync`/`spawnSync`strings. Shell metacharacters cause **comm |
medium line 38
Access to .env file
SourceSKILL.md
| 38 | - **Secrets**: Store secrets in **`.env`** (e.g., **`JWT_SECRET`**) or **Secret Managers**. NEVER commit them to Git. |
Scanned on Jun 6, 2026
View Security DashboardGitHub Stars 506
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
github-copilotcodexchatgptclaude-codecursoropencodewindsurfroo-codeampaidergemini-cliantigravitymanusbackendapicross-platformbackend-developerdevops-sresecurity-engineerdata-engineerfullstack-developerdevelopment
HoangNguyen0403/agent-skills-standard