sveltekit-security-stinger
Evidence-backed, read-only security audit of Svelte 4/5 and SvelteKit 2 apps, any stack. Versions vs advisories, load leaks, actions, remote functions, hooks, XSS, CSRF, adapters.
- Version
- 1.0.0
- License
- AGPL-3.0-or-later
- Compatibility
- Claude Code 2.1 or newer, Cursor 2.4 or newer, Codex, Cowork. Scanner needs Python 3.11 or newer (standard library only); ripgrep recommended.
Pinned to revision 4415691ad3b9, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/sveltekit-security-stinger/SKILL.md
- skills/sveltekit-security-stinger/guides/00-scoping-and-version-check.md
- skills/sveltekit-security-stinger/guides/01-server-client-boundary-and-load-exposure.md
- skills/sveltekit-security-stinger/guides/02-actions-endpoints-remote-functions.md
- skills/sveltekit-security-stinger/guides/03-hooks-and-authorization-model.md
- skills/sveltekit-security-stinger/guides/04-xss-csp-and-cookies.md
- skills/sveltekit-security-stinger/guides/05-config-adapters-and-prerender.md
- skills/sveltekit-security-stinger/guides/06-writing-findings.md
- skills/sveltekit-security-stinger/references/REFERENCE.md
- skills/sveltekit-security-stinger/references/advisory-table.md
- skills/sveltekit-security-stinger/references/check-catalog.md
- skills/sveltekit-security-stinger/references/detection-patterns.md
- skills/sveltekit-security-stinger/references/research/distilled-sveltekit-security.md
- skills/sveltekit-security-stinger/references/severity-guide.md
- skills/sveltekit-security-stinger/scripts/advisories.json
- skills/sveltekit-security-stinger/scripts/sveltekit_audit_scan.py
- skills/sveltekit-security-stinger/scripts/test_symlinks.py
Every link opens the file at its source, pinned to the revision this page describes.