Skills frontend-security-coder

📦

frontend-security-coder

Name: frontend-security-coder
Author: sickn33

Content revision r1 Safe ⚙️ External commands

Build Secure Frontend Applications

Client-side vulnerabilities can expose users through unsafe rendering, navigation, and browser integrations. This skill provides practical guidance for secure frontend implementation and verification.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "frontend-security-coder" from https://skillstore.io/skills/sickn33-frontend-security-coder.md and its manifest at https://skillstore.io/api/skills/sickn33-frontend-security-coder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-frontend-security-coder.md Signed manifest GET /api/skills/sickn33-frontend-security-coder/manifest Signed lockfile GET /api/skills/sickn33-frontend-security-coder/lockfile

Test it

Using "frontend-security-coder". We display customer names with innerHTML. What should change?

Expected outcome:

Use a text-only DOM API for names, remove HTML interpretation, and add tests with markup-like input to confirm safe rendering.

Using "frontend-security-coder". Our site needs a CSP without breaking third-party payments.

Expected outcome:

Start in report-only mode, inventory required origins, prefer nonces or hashes, validate the payment integration, then enforce the tested policy.

Using "frontend-security-coder". Users can submit formatted biographies with links.

Expected outcome:

Sanitize permitted HTML with an established library, restrict URLs and attributes, keep sanitization near the rendering boundary, and test bypass payloads.

Security Audit

Safe

v5 • 7/23/2026 Open versioned report

The only static finding is a false positive: line 24 uses Markdown backticks to identify a documentation path, not execute a shell command. No prompt injection, exfiltration intent, executable code, or other semantic security issue was found in the scanned skill.

Files scanned

174

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (1)

SKILL.md:24

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-frontend-security-coder/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-frontend-security-coder/security.svg)](https://skillstore.io/skills/sickn33-frontend-security-coder?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-frontend-security-coder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-frontend-security-coder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-frontend-security-coder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). frontend-security-coder security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-frontend-security-coder/audits/5

BibTeX citation

@techreport{sickn33-sickn33-frontend-security-coder-2026,
  author = {sickn33},
  title = {frontend-security-coder security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/sickn33-frontend-security-coder/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "frontend-security-coder security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-frontend-security-coder/audits/5"
identifiers:
  - type: other
    value: "skillstore:sickn33-frontend-security-coder:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Secure a rendering feature

Choose safe DOM APIs and sanitization boundaries for user-controlled text or permitted HTML.

Plan browser defenses

Define CSP, Trusted Types, SRI, framing, and cross-origin controls for an application.

Review an integration

Evaluate redirects, authentication flows, widgets, payment forms, or service workers before release.

Try These Prompts

Secure dynamic text rendering

Review how [untrusted content] is rendered in [framework]. Explain the XSS risk and recommend safe DOM APIs.

Design safe rich-text handling

Design a safe rich-text rendering flow for [application]. Include sanitization boundaries, allowed content, URL validation, and test cases.

Plan a staged CSP rollout

Create a staged Content Security Policy for [application architecture]. Cover report-only deployment, nonces or hashes, third-party sources, reporting, and compatibility testing.

Assess a complete frontend feature

Assess [frontend feature] for XSS, open redirects, clickjacking, token exposure, and third-party risks. Propose prioritized fixes and verification steps.

Best Practices

Provide the framework, data source, trust boundary, and browser requirements with each request.
Treat server validation, authorization, and secure headers as required companions to frontend controls.
Deploy policies gradually, collect violations, and verify expected workflows before enforcement.

Avoid

Do not insert untrusted values through HTML-parsing DOM APIs without established sanitization.
Do not build custom sanitizers when a maintained, well-tested library meets the requirement.
Do not store sensitive session tokens in browser storage without evaluating exposure and application architecture.

Frequently Asked Questions

Does this skill execute security tools?

No. It contains guidance for analysis, implementation, and verification, but no executable scanner or automation.

Can it replace a penetration test?

No. Use dedicated testing and expert review for environment-specific assurance.

Which frontend frameworks does it support?

Its browser security principles are framework-neutral. Provide framework details for more specific recommendations.

Can it secure server-side behavior?

It can identify related requirements, but backend validation, authorization, headers, and session controls need separate implementation.

How does it handle permitted HTML?

It recommends established sanitization libraries, explicit content rules, safe URL handling, and tests for bypass attempts.

Is the referenced implementation playbook included?

No. The scanned package contains only SKILL.md, so detailed guidance must come from the main skill content.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/frontend-security-coder

Ref

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Maintenance freshness

7/26/2026

Usage

7 downloads · 86 views

File structure

📄 SKILL.md