What problem does it solve? Frontend code touching user input, auth flows, dynamic rendering, and third-party dependencies is a common source of security vulnerabilities. This Skill provides a structured review process so security checks are applied consistently whenever changes cross a system boundary. ## Core Features & Use Cases - OWASP Top 10 Prevention: Applies input validation, auth pattern checks, and secrets management rules to Vue/Nuxt/TypeScript code. - Dependency Audit Workflow: Runs a five-question evaluation before adding dependencies (existing stack fit, bundle size, maintenance status, vulnerabilities, license) followed by npm audit or yarn audit. - Anti-Rationalization Guardrails: Counters common excuses like "it's behind auth" or "env vars are safe" with concrete security realities. - Use Case: When adding a form that accepts user input or integrating a new external service, activate this Skill to validate input handling, check for v-html injection risks, and audit any new dependencies. ## Quick Start Review my latest changes to the login form and user profile page for security vulnerabilities using the security-hardening checklist.
