integration
Expert in backend-frontend integration patterns using type-safe API contracts and validation for full-stack features.
Install this skill
or
71/100
Security score
The integration skill was audited on Feb 28, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 209
Template literal with variable interpolation in command context
SourceSKILL.md
| 209 | const response = await fetch(`${API_BASE}/api/tasks`, { |
medium line 213
Template literal with variable interpolation in command context
SourceSKILL.md
| 213 | "Authorization": `Bearer ${getToken()}`, |
medium line 459
Template literal with variable interpolation in command context
SourceSKILL.md
| 459 | toast.error(`Validation error: ${error.message}`) |
medium line 1131
Template literal with variable interpolation in command context
SourceSKILL.md
| 1131 | message: `Task "${task.title}" created` |
medium line 1179
Template literal with variable interpolation in command context
SourceSKILL.md
| 1179 | console.log(`Query ${params.model}.${params.action} took ${after - before}ms`) |
low line 206
Access to .env file
SourceSKILL.md
| 206 | const API_BASE = process.env.NEXT_PUBLIC_API_URL || "http://localhost:8000" |
low line 811
Access to .env file
SourceSKILL.md
| 811 | log: process.env.NODE_ENV === 'development' ? ['query', 'error', 'warn'] : ['error'], |
low line 814
Access to .env file
SourceSKILL.md
| 814 | if (process.env.NODE_ENV !== 'production') globalForPrisma.prisma = prisma |
low line 206
External URL reference
SourceSKILL.md
| 206 | const API_BASE = process.env.NEXT_PUBLIC_API_URL || "http://localhost:8000" |
Scanned on Feb 28, 2026
View Security DashboardGitHub Stars 22
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
openclawapibackendfrontendfullstack-developerbackend-developerfrontend-developerproduct-managertechnical-pmdevelopmentproduct
mattnigh/skills_collection