---
title: "TypeScript/JavaScript 安全"
description: "> 本文档扩展了 [common/security.md](../common/security.md)，包含了 TypeScript/JavaScript 特定的内容。"
type: skill
canonical_url: https://claudary.paisolsolutions.com/skills/security-44
source: "Claudary"
difficulty: intermediate
author: "Claude Code Knowledge Pack"
date: 2026-07-10T11:46:34.954Z
license: CC-BY-4.0
attribution: "TypeScript/JavaScript 安全 — Claudary (https://claudary.paisolsolutions.com/skills/security-44)"
---

# TypeScript/JavaScript 安全
> 本文档扩展了 [common/security.md](../common/security.md)，包含了 TypeScript/JavaScript 特定的内容。

## Overview

---
paths:
  - "**/*.ts"
  - "**/*.tsx"
  - "**/*.js"
  - "**/*.jsx"
---

# TypeScript/JavaScript 安全

> 本文档扩展了 [common/security.md](../common/security.md)，包含了 TypeScript/JavaScript 特定的内容。

## 密钥管理

```typescript
// NEVER: Hardcoded secrets
const apiKey = "sk-proj-xxxxx"

// ALWAYS: Environment variables
const apiKey = process.env.OPENAI_API_KEY

if (!apiKey) {
  throw new Error('OPENAI_API_KEY not configured')
}
```

## 代理支持

* 使用 **security-reviewer** 技能进行全面的安全审计

---

Source: [Claudary](https://claudary.paisolsolutions.com/skills/security-44) · https://claudary.paisolsolutions.com