nextjs-security-scan
Installation
SKILL.md
Boundary
This skill provides comprehensive security vulnerability scanning for Next.js and TypeScript/JavaScript projects. It focuses on OWASP Top 10 vulnerabilities, XSS, injection flaws, authentication issues, hardcoded secrets, and Next.js-specific security problems. It does NOT cover backend infrastructure security (use security-pro), DevSecOps pipelines (use ci-cd-pro), or general security architecture (use security-review).
When to use
Use this skill when:
- Performing security audits of Next.js applications
- Conducting code reviews for security vulnerabilities
- Running pre-deployment security checks
- Assessing dependency vulnerabilities
- Detecting hardcoded secrets and credentials
- Scanning for XSS and injection flaws
- Checking Server Actions authentication