perseus-client
Perseus Client analyzes client-side security vulnerabilities in modern JavaScript frameworks, ensuring safe web applications.
Install this skill
Security score
The perseus-client skill was audited on Mar 1, 2026 and we found 10 security issues across 3 threat categories, including 3 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Eval function call - arbitrary code execution
| 292 | eval(data) |
Eval function call - arbitrary code execution
| 376 | eval(e.data.code); // RCE via any origin |
Template literal with variable interpolation in command context
| 105 | const user = await db.query(`SELECT * FROM users WHERE id = ${params.id}`); |
Template literal with variable interpolation in command context
| 132 | return db.query(`SELECT * FROM users WHERE name LIKE '%${query}%'`); |
Template literal with variable interpolation in command context
| 205 | return db.query(`SELECT * FROM items WHERE id = ${id}`); |
Template literal with variable interpolation in command context
| 504 | return db.query(`SELECT * FROM products WHERE name LIKE '%${query}%'`); |
Access to .env file
| 111 | <ClientComponent apiKey={process.env.SECRET_KEY} /> |
Access to .env file
| 212 | secretKey: process.env.SECRET // Exposed to client! |
Access to .env file
| 431 | // Check .env files exposed |
External URL reference
| 388 | if (e.origin !== 'https://trusted.com') return; |
Install this skill with one command
/learn @kaivyy/client