Skip to main content

javascript-testing-patterns

Implements comprehensive testing strategies in JavaScript/TypeScript using Jest, Vitest, and Testing Library for robust applications.

Install this skill

or
55/100

Security score

The javascript-testing-patterns skill was audited on Mar 8, 2026 and we found 17 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 218

Template literal with variable interpolation in command context

SourceSKILL.md
218const response = await fetch(`https://api.example.com/users/${id}`);
medium line 445

Template literal with variable interpolation in command context

SourceSKILL.md
445info: (message: string) => console.log(`INFO: ${message}`),
medium line 446

Template literal with variable interpolation in command context

SourceSKILL.md
446error: (message: string) => console.error(`ERROR: ${message}`),
medium line 454

Template literal with variable interpolation in command context

SourceSKILL.md
454logger.info(`Processing order ${orderId}`);
medium line 456

Template literal with variable interpolation in command context

SourceSKILL.md
456logger.info(`Order ${orderId} processed successfully`);
medium line 580

Template literal with variable interpolation in command context

SourceSKILL.md
580.get(`/api/users/${userId}`)
medium line 617

Template literal with variable interpolation in command context

SourceSKILL.md
617.set("Authorization", `Bearer ${token}`)
low line 226

Fetch to external URL

SourceSKILL.md
226const response = await fetch("https://api.example.com/users", {
low line 309

Access to .env file

SourceSKILL.md
309host: process.env.SMTP_HOST,
low line 312

Access to .env file

SourceSKILL.md
312user: process.env.SMTP_USER,
low line 313

Access to .env file

SourceSKILL.md
313pass: process.env.SMTP_PASS,
low line 319

Access to .env file

SourceSKILL.md
319from: process.env.EMAIL_FROM,
low line 218

External URL reference

SourceSKILL.md
218const response = await fetch(`https://api.example.com/users/${id}`);
low line 226

External URL reference

SourceSKILL.md
226const response = await fetch("https://api.example.com/users", {
low line 262

External URL reference

SourceSKILL.md
262expect(fetch).toHaveBeenCalledWith("https://api.example.com/users/1");
low line 288

External URL reference

SourceSKILL.md
288"https://api.example.com/users",
low line 915

External URL reference

SourceSKILL.md
915avatar: 'https://example.com/avatar.jpg',
Scanned on Mar 8, 2026
View Security Dashboard