TypeScript Security Skill

USE WHEN: Securing TypeScript/JavaScript applications, reviewing frontend/backend code for vulnerabilities. DO NOT USE FOR: Code quality issues (use typescript-quality), general TypeScript patterns, styling.

OWASP Top 10 for TypeScript

A01: Broken Access Control

// Bad: No authorization check
app.get('/api/users/:id', async (req, res) => {
  const user = await User.findById(req.params.id);
  res.json(user);
});

// Good: Ownership verification
app.get('/api/users/:id', authenticate, async (req, res) => {
  const userId = req.params.id;