Js Security Audit
Skill Verified ActiveAudit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response. Use when reviewing package.json or lockfiles, adding or upgrading npm dependencies, setting up CI security gates, hardening a new repo, or responding to a compromised package.
To ensure JavaScript and TypeScript projects adhere to robust NPM security standards, preventing common vulnerabilities and supply-chain attacks.
Features
- Audits project setup for security hygiene
- Checks dependency hygiene and versioning
- Verifies CI/CD pipeline security gates
- Reviews Dependabot configuration and alerting
- Assesses incident response readiness
Use Cases
- Hardening new repositories
- Reviewing PRs that modify dependencies
- Setting up CI security gates
- Responding to supply-chain attack alerts
Non-Goals
- Performing direct code injection
- Managing external infrastructure
- Writing or modifying production code directly
Installation
First, add the marketplace
/plugin marketplace add spartan-stratos/spartan-ai-toolkit/plugin install toolkit@spartan-marketplaceQuality Score
VerifiedSimilar Extensions
Ship Gate
100Pre-production audit that scans a codebase for security, database, deployment, code quality, AI/LLM, dependency, frontend, and observability issues. Intercepts deploy commands and blocks until critical items pass. Stack-agnostic. Use for "run ship gate", "am I ready to ship", "pre-launch audit", "can I deploy", "push to production", "go live checklist", "preflight check". Not for CI/CD setup or infra provisioning.
Refactor Plan
100Prioritized redesign action plan covering quick wins, medium effort, major rework
Deepinit
100Deep codebase initialization with hierarchical AGENTS.md documentation
Cleanup Cycles
100Detect and untangle circular dependencies. Runs madge/skott (TS), pycycle (Py), or compiler-only checks (Go/Rust). Auto-fixes leaf-extractable cycles; reports core cycles for human review. Use when the user asks to find circular imports, fix dependency cycles, or untangle module graph. Example queries — "find circular imports", "fix dependency cycles", "untangle our module graph", "why is madge complaining".
Netlify Identity
100Use when the task involves authentication, user signups, logins, password recovery, OAuth providers, role-based access control, or protecting routes and functions. Always use `@netlify/identity`. Never use `netlify-identity-widget` or `gotrue-js` — they are deprecated.
Vue Router Best Practices
100Vue Router 4 patterns, navigation guards, route params, and route-component lifecycle interactions.