zenticalab-security
Provides security guidance for ZENTICALAB based on OWASP Top 10 2025, focusing on .NET and Angular best practices.
Install this skill
Security score
The zenticalab-security skill was audited on May 27, 2026 and we found 15 security issues across 3 threat categories, including 3 critical. Review the findings below before installing.
Categories Tested
Security Issues
Eval function call - arbitrary code execution
| 363 | **Nunca usar `eval()` ni `new Function()` en Angular:** |
Eval function call - arbitrary code execution
| 366 | eval(`console.log('${userInput}')`); |
Eval function call - arbitrary code execution
| 389 | - [ ] No usar `eval()`, `new Function()`, `innerHTML` con input de usuario |
Eval function call - arbitrary code execution
| 760 | - [ ] No `eval()`, `new Function()`, ni `innerHTML` con input de usuario |
Template literal with variable interpolation in command context
| 366 | eval(`console.log('${userInput}')`); |
Template literal with variable interpolation in command context
| 566 | ```yaml |
Template literal with variable interpolation in command context
| 721 | return this.http.get<Item[]>(`${environment.apiUrl}/items`).pipe( |
Access to .env file
| 182 | - [ ] Secrets **nunca** en `appsettings.json` — solo en `.env` o Azure Key Vault |
Access to .env file
| 287 | - [ ] Connection strings no commitidas (`.env` en `.gitignore`) |
External URL reference
| 16 | > **Fuentes:** [OWASP Top 10 2025](https://owasp.org/Top10/2025/) | [Angular Security](https://angular.dev/best-practices/security) | [Microsoft OWASP Training](https://learn.microsoft.com/en-us/train |
External URL reference
| 132 | b.WithOrigins("https://zenticalab.com", "https://admin.zenticalab.com") |
External URL reference
| 769 | - [OWASP Top 10 2025](https://owasp.org/Top10/2025/) |
External URL reference
| 770 | - [OWASP Top 10 .NET Developers](https://learn.microsoft.com/en-us/training/modules/owasp-top-10-for-dotnet-developers/) |
External URL reference
| 771 | - [Angular Security](https://angular.dev/best-practices/security) |
External URL reference
| 772 | - [ASP.NET Core Security Best Practices](https://learn.microsoft.com/en-us/aspnet/core/security/best-practices) |