general-frontend-securitylisted

Framework-agnostic frontend security guide based on OWASP Secure Coding Practices: XSS prevention, CSRF protection, Content Security Policy, secure cookie configuration, client-side auth patterns, input validation, secure storage, and security headers. Applies to any web frontend, not only Nuxt. Activates on XSS, CSRF, CSP, clickjacking, security headers, "Sicherheitslücke", or a frontend security audit. NOT for backend/NestJS security (use generating-nest-servers). NOT for Nuxt-specific implementation (use developing-lt-frontend).
lenneTech/claude-code · ★ 0 · Web & Frontend · score 75

Install: claude install-skill lenneTech/claude-code

# General Frontend Security Framework-agnostic security practices for web applications based on OWASP guidelines. ## When to Use This Skill - Reviewing frontend code for security vulnerabilities - Implementing client-side authentication flows - Setting up secure cookie handling - Configuring Content Security Policy - Auditing third-party dependencies - General frontend security questions ## Skill Boundaries | User Intent | Correct Skill | |------------|---------------| | "XSS prevention best practices" | **THIS SKILL** | | "Security audit of frontend" | **THIS SKILL** | | "Configure CSP headers" | **THIS SKILL** | | "Build a secure login page in Nuxt" | developing-lt-frontend | | "Fix @Restricted decorator in NestJS" | generating-nest-servers | | "Run npm audit fix" | maintaining-npm-packages | ## Related Skills & Commands | Command | Purpose | |---------|---------| | `/lt-dev:review` | General security review of branch diff (framework-agnostic) | | `/lt-dev:backend:sec-review` | Security review of backend code changes (auth, decorators, models) | | `/lt-dev:backend:sec-audit` | Full OWASP security audit (dependencies, config, code) | ## Framework-Specific References | Framework | Reference File | |-----------|---------------| | Nuxt/Vue | See `developing-lt-frontend` skill (reference/security.md) | | Angular | [angular-security.md](${CLAUDE_SKILL_DIR}/angular-security.md) | ## Key Principles 1. **Never trust client-side validation** - Server must always verify 2.