Skills nodejs-best-practices
📦

nodejs-best-practices

Content revision r2 Safe ⚙️ External commands📁 Filesystem access

Improve Node.js Architecture and Security

Node.js projects often adopt frameworks and patterns without considering runtime, deployment, or growth. This skill guides context-aware architecture, security, validation, and testing decisions.

Supports: Claude Codex Code(CC)
🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "nodejs-best-practices" from https://skillstore.io/skills/sickn33-nodejs-best-practices.md and its manifest at https://skillstore.io/api/skills/sickn33-nodejs-best-practices/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-nodejs-best-practices.md Signed manifest GET /api/skills/sickn33-nodejs-best-practices/manifest Signed lockfile GET /api/skills/sickn33-nodejs-best-practices/lockfile

Test it

Using "nodejs-best-practices". Recommend a framework for a TypeScript API deployed to Cloudflare Workers.

Expected outcome:

Recommendation: Hono. Its edge focus and small dependency footprint fit worker deployments. Confirm middleware, observability, and team experience before implementation.

Using "nodejs-best-practices". Review an endpoint that performs three independent database queries sequentially.

Expected outcome:

  • Use parallel execution when the queries have no dependencies.
  • Define behavior for partial failures before choosing the promise strategy.
  • Measure database load and request latency after the change.

Using "nodejs-best-practices". Outline security checks for a new authenticated API.

Expected outcome:

  • Validate request data and external responses at system boundaries.
  • Verify token signatures and expiry, then enforce resource authorization.
  • Use parameterized queries, rate limits, security headers, HTTPS, and managed secrets.
  • Audit dependencies and test authentication, authorization, and failure paths.

Security Audit

Safe
v5 • 8/4/2026 Open versioned report

All 30 static findings are false positives caused by Markdown fences, inline code formatting, defensive filesystem guidance, HTTP status documentation, and headings. The skill contains only instructional prose and no prompt injection, executable scripts, automatic commands, or filesystem actions.

1
Files scanned
344
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (23)
SKILL.md:33-50 SKILL.md:50-74 SKILL.md:74-79 SKILL.md:79-83 SKILL.md:83-94 SKILL.md:94-110 SKILL.md:110-127 SKILL.md:127-145 SKILL.md:145-151 SKILL.md:151-155 SKILL.md:155-167 SKILL.md:167-189 SKILL.md:189-190 SKILL.md:190-191 SKILL.md:191-192 SKILL.md:192-196 SKILL.md:196-208 SKILL.md:208-222 SKILL.md:222-228 SKILL.md:228-264 SKILL.md:264-272 SKILL.md:272-295 SKILL.md:295-300
📁 Filesystem access (2)
SKILL.md:212 SKILL.md:212
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-nodejs-best-practices/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-nodejs-best-practices/security.svg)](https://skillstore.io/skills/sickn33-nodejs-best-practices?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-nodejs-best-practices?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-nodejs-best-practices/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-nodejs-best-practices.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). nodejs-best-practices security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-nodejs-best-practices/audits/5

BibTeX citation

@techreport{sickn33-sickn33-nodejs-best-practices-2026, author = {sickn33}, title = {nodejs-best-practices security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-nodejs-best-practices/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "nodejs-best-practices security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-04" url: "https://skillstore.io/skills/sickn33-nodejs-best-practices/audits/5" identifiers: - type: other value: "skillstore:sickn33-nodejs-best-practices:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Plan a New API

Select a framework, runtime, module system, and architecture from workload and deployment requirements.

Review a Growing Service

Assess layer boundaries, error handling, validation, async behavior, security controls, and test priorities.

Define Team Standards

Create practical Node.js guidance for architecture, security, testing, and event-loop safety.

Try These Prompts

Choose a Framework 
Compare Node.js frameworks for my project. Ask about deployment, traffic, team experience, TypeScript needs, and legacy constraints before recommending one.
Design the Architecture 
Design a Node.js architecture for [project]. Define controller, service, and repository responsibilities. Explain where validation and error handling belong.
Review Async and Security Risks 
Review my Node.js design for event-loop blocking, unsafe async patterns, missing validation, secret handling, authorization, rate limiting, and dependency risks.
Create an Implementation Decision Record 
Produce a decision record for [system]. Compare frameworks and runtimes, justify architecture boundaries, define failure handling, and prioritize security and tests.

Best Practices

  • Provide deployment target, traffic profile, team experience, and growth expectations before requesting a recommendation.
  • Validate recommendations against current Node.js and library documentation before implementation.
  • Combine architecture guidance with benchmarks, threat modeling, tests, and production observability.

Avoid

  • Selecting a framework only from popularity or benchmark headlines.
  • Applying layered architecture to a small script without a clear maintenance benefit.
  • Treating general security guidance as proof that a specific implementation is secure.

Frequently Asked Questions

Does this skill generate production-ready code?
No. It provides decision guidance and review criteria. Implementation still requires project-specific code, tests, and validation.
Which Node.js frameworks does it compare?
It discusses Hono, Fastify, Express, NestJS, Next.js API routes, and tRPC for different project contexts.
Does it cover TypeScript decisions?
Yes. It discusses native TypeScript support, module systems, framework typing, and validation libraries.
Can it review an existing service?
Yes. Provide architecture, deployment, error handling, validation, async behavior, security controls, and testing details.
Does it execute commands or modify files?
No. The skill is instructional Markdown and does not include scripts or automatic execution.
How current are the recommendations?
The source describes 2025 practices. Verify runtime flags, framework support, and package status against current official documentation.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/nodejs-best-practices

Ref

81e05e636292629114b76cbb3922fbe57672fc02

Maintenance freshness

8/5/2026

Usage

9 downloads · 72 views

File structure

📄 SKILL.md