javascript
Debug JavaScript and TypeScript Logic
Async errors, shared mutations, and weak validation can make JavaScript behavior unreliable. This skill guides focused fixes using modern language features and defensive runtime practices.
Installer avec mon Agent
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Review the Skillstore skill "javascript" from https://skillstore.io/skills/shreyam1008-javascript.md and its manifest at https://skillstore.io/api/skills/shreyam1008-javascript/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Ressources lisibles par les agents
Utilisez ces liens lorsquâun Agent IA, un crawler ou un script a besoin dâun contexte propre au lieu de lire toute la page.
Tester
Utilisation de « javascript ». My async forEach finishes before all updates complete.
RĂ©sultat attendu:
- forEach does not await promises returned by its callback.
- Use sequential iteration when updates depend on earlier results.
- For independent updates, collect promises and await their combined completion.
- Handle rejections explicitly so failed updates remain visible.
Utilisation de « javascript ». A zero quantity becomes the default quantity.
RĂ©sultat attendu:
- Logical OR treats zero as a missing value because zero is falsy.
- Use nullish coalescing when only null and undefined should trigger the default.
- Check zero, empty strings, null, and undefined against the intended behavior.
Utilisation de « javascript ». A browser module leaks memory after repeated mounting and teardown.
RĂ©sultat attendu:
- Review listeners, observers, and timers that remain active after teardown.
- Check closures for references to detached DOM nodes.
- Use WeakMap for object metadata when the metadata must not retain its keys.
- WeakRef collection timing is nondeterministic and cannot replace explicit cleanup.
Audit de sécurité
SûrAll 31 static findings are false positives supported by the skill text. Markdown formatting, defensive programming guidance, and a cancellable fetch example explain the matches. No evidence found of prompt injection, unauthorized execution, reconnaissance, or data exfiltration.
Facteurs de risque
âïž Commandes externes (23)
đ AccĂšs rĂ©seau (1)
Partager et citer ce rapport
Partagez le rapport dâĂ©valuation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.
Copier le lien du rapport
https://skillstore.io/skills/shreyam1008-javascript/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/shreyam1008-javascript?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/shreyam1008-javascript?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shreyam1008-javascript/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Carte intégrable
<iframe src="https://skillstore.io/embed/skills/shreyam1008-javascript.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citations académiques (APA · BibTeX · CFF)
Citation APA
shreyam1008. (2026). javascript security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shreyam1008-javascript/audits/1Citation BibTeX
@techreport{shreyam1008-shreyam1008-javascript-2026,
author = {shreyam1008},
title = {javascript security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/shreyam1008-javascript/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "javascript security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "shreyam1008"
date-released: "2026-10-02"
url: "https://skillstore.io/skills/shreyam1008-javascript/audits/1"
identifiers:
- type: other
value: "skillstore:shreyam1008-javascript:audit:1"
description: "Skillstore immutable audit report identifier"
Score Skillstore
Pourquoi ce score Niveau de confiance des preuves: MoyenCe que vous pouvez créer
Correct asynchronous workflows
Review promise handling, asynchronous loops, cancellation, and independent operations in application logic.
Review browser safety and cleanup
Check untrusted DOM content, listener teardown, timers, and retained object references during frontend reviews.
Strengthen TypeScript boundaries
Improve external data checks, unknown narrowing, union models, and exported function types.
Essayez ces prompts
Review this JavaScript expression: [expression]. Explain why zero or an empty string receives the fallback, and suggest a nullish default.
Review this async loop: [code]. Explain completion and rejection behavior, then suggest sequential or concurrent processing based on [requirements].
Review this TypeScript data boundary: [code]. Identify missing runtime validation, unsafe assertions, and HTML risks. Suggest strict types and defensive checks.
Audit this module: [code]. Evaluate stale requests, cancellation, retained references, event cleanup, and exhaustive states. Prioritize fixes and identify runtime compatibility constraints.
Bonnes pratiques
- Provide the relevant code, expected behavior, error details, and target runtime.
- Validate external data at boundaries and keep untrusted text away from executable and HTML sinks.
- Verify changes with focused tests, linting, and runtime compatibility checks.
Ăviter
- Use async callbacks in forEach when completion must be awaited.
- Trust TypeScript assertions or TrustedHTML types without runtime validation or sanitization.
- Leave stale requests, listeners, observers, and timers active after teardown.
Foire aux questions
Which AI tools are listed as supported?
Does this skill cover TypeScript?
Does it cover React rendering or UI design?
Does it install dependencies or run tests automatically?
Does the fetch example send information to a service?
Are all recommended APIs available in older runtimes?
Détails du développeur
Auteur
shreyam1008Licence
MIT
RĂ©vision Skillstore
r1
Avis de version
Lâauteur nâa dĂ©clarĂ© aucune version.
RĂ©f
bbec03cf10354f3aaccd6dd24eda4ac9ceeceac5
RĂ©cence de maintenance
02/10/2026
Utilisation
0 téléchargements · 0 vues
Structure de fichiers
đ SKILL.md