security
🔌Pluginphotostructure/coding-skills
|Two complementary JavaScript/TypeScript web security skills: web-security-review traces data flow and reports only proven vulnerabilities; web-security-hardening performs an applicability-aware OWASP ASVS 5.0.0 gap assessment across browser controls, input/files, identity/sessions/secrets, frameworks, storage, and deployment.
Part of
photostructure/coding-skills
Installation
/plugin marketplace add photostructure/coding-skills/plugin install security@photostructureMore from this repository3
Nine workflow skills: replan (iterative planning), review, review-staged, and double-review (proof-based code review), gitplan and stage (disciplined Conventional-Commit staging), and the Technical Project Plan workflow (tpp, handoff, tpp-orchestrate — multi-session plan files with serial orchestration, TDD subagents, and dual vetted reviews).
Two complementary modern-C++ (C++17) native-addon skills: resource-review traces object and resource lifetimes and reports only proven memory/resource defects (use-after-free, double-free, leaks, out-of-bounds, integer overflow, data races, Node-API handle/reference/threadsafe-function misuse); project-setup performs an applicability-aware Met/Gap assessment of cross-platform node-gyp build config, per-OS/per-arch compiler hardening, sanitizer/static-analysis/CI wiring, and maintainable modern-C++ conventions.
Opinionated Claude Code and Codex workflow skills: iterative planning, proof-based review, and clean Conventional Commits.