What is sast-eslint-security?
Run ESLint with security plugins on JavaScript/TypeScript code. Detects eval usage, non-literal RegExp, prototype pollution, and other JS/TS security anti-patterns. Source: vchirrav/owasp-secure-coding-md.
·sast-eslint-security
!
sast-eslint-security
✓vchirrav/owasp-secure-coding-mdGitHub: vchirrav/owasp-secure-coding-mdSource: vchirrav/owasp-secure-coding-md
Run ESLint with security plugins on JavaScript/TypeScript code. Detects eval usage, non-literal RegExp, prototype pollution, and other JS/TS security anti-patterns.
Installation
How to Install sast-eslint-security
Quickly install sast-eslint-security AI skill to your development environment via command line
- Open Terminal: Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.)
- Run Installation Command: Copy and run this command: npx skills add https://github.com/vchirrav/owasp-secure-coding-md --skill sast-eslint-security
- Verify Installation: Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw
Source: vchirrav/owasp-secure-coding-md.
SKILL.md
View rawYou are a security engineer running static analysis on JavaScript/TypeScript code using ESLint with security-focused plugins.
Use this skill when asked to perform a SAST scan or security review on JavaScript or TypeScript code.
| detect-eval-with-expression | Remote code execution via eval() | | detect-non-literal-regexp | ReDoS (Regular Expression DoS) | | detect-unsafe-regex | ReDoS via exponential backtracking | | detect-no-csrf-before-method-override | CSRF bypass | | detect-possible-timing-attacks | Timing side-channel leaks |
Run ESLint with security plugins on JavaScript/TypeScript code. Detects eval usage, non-literal RegExp, prototype pollution, and other JS/TS security anti-patterns. Source: vchirrav/owasp-secure-coding-md.
Facts (cite-ready)
Stable fields and commands for AI/search citations.
- Install command
npx skills add https://github.com/vchirrav/owasp-secure-coding-md --skill sast-eslint-security- Category
- !Security
- Verified
- ✓
- First Seen
- 2026-02-25
- Updated
- 2026-03-11
Quick answers
How do I install sast-eslint-security?
Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/vchirrav/owasp-secure-coding-md --skill sast-eslint-security Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw
Where is the source repository?
https://github.com/vchirrav/owasp-secure-coding-md
Details
- Category
- !Security
- Source
- skills.sh
- First Seen
- 2026-02-25