JS/TS — review checklists

Consumed by the review-code skill. When the js_ts profile is active, every checklist in Always load is applied to the diff. There are no conditional entries for this profile.

Always load

• security-checklist.md — JS/TS-specific security smells: XSS, prototype pollution, unsafe deserialization, npm-ecosystem supply chain, secret handling, input validation.
• solid-checklist.md — SOLID design-principle smells expressed in JS/TS: module responsibility, interface/type segregation, dependency inversion, composition over inheritance in class/function code.
• code-quality-checklist.md — idiomatic JS/TS quality signals: strict typing, async/await discipline, module boundaries, maintainability.
• removal-plan.md — staged-removal template for JS/TS code being retired (exports, packages, public APIs).