forcedotcom logo
Accessibility

Real file from a public repo · synced Sep 3, 2026

experience-lwc-security-validate

Use this skill as THE specialized Lightning Web Security (LWS) validator for a Lightning Web Component bundle (.js, .ts, .html, .css, .js-meta.xml) — the canonical LWS/Product-Security review for LWCs, NOT a generic code-security pass. It produces either a severity-ranked finding list with code-level remediations or a SARIF 2.1.0 JSON score report keyed by the lws-001…lws-023b rule catalog. TRIGGER when the user asks to review, audit, or check an LWC component for LWS compliance issues and recommend fixes, score a component's LWS/security compliance, find dangerous DOM APIs or blocked sinks (eval, Function, document.write, innerHTML, document.createElement('script'), global-scope assignment to window/globalThis, unsafe URL schemes), or emit a SARIF security report. DO NOT TRIGGER for generic non-LWC security review, for building a new LWC (use experience-lwc-generate), accessibility (WCAG 2.2), RTL/i18n, or Apex/Aura/server-side review.

forcedotcom/sf-skills1.6k installsApache-2.0

Works with

Claude CodeCursorCodex CLIGitHub CopilotGemini CLI

Install in three steps

  1. 1

    Download the ZIP

    One file per agent, plus INSTALL.md with the exact paths below.

  2. 2

    Claude Code: copy SKILL.md into your skills folder

    .claude/skills/experience-lwc-security-validate/SKILL.md    # this project
    ~/.claude/skills/experience-lwc-security-validate/SKILL.md   # every project
  3. 3

    Other agents: use the matching file

    skill.mdc goes in Cursor’s .cursor/rules/. AGENTS.md works as GitHub Copilot instructions, a legacy .cursorrules, or a Codex / Gemini CLI instructions file.

More Accessibility skills

All Accessibility skills

Check your AI visibility

One URL in, a 0–100 score and the exact fixes out.

RUN THE CHECK

Browse all the tools

15 tools across six categories
13 of them never send your data anywhere

Free · No signup · No trial clock

SEE THE DIRECTORY