$npx -y skills add transilienceai/communitytools --skill frontendFrontend tech-stack identification — JavaScript frameworks, meta-frameworks, CSS frameworks, UI libraries, build tools, and CMS via DOM, JS globals, HTML, and bundle patterns.
| 1 | # Frontend Tech-Stack Identification |
| 2 | |
| 3 | ## Scope |
| 4 | |
| 5 | Identify client-side technologies: JavaScript frameworks (React, Vue, Angular, Svelte), meta-frameworks (Next.js, Nuxt, Gatsby, Remix), CSS frameworks (Tailwind, Bootstrap, Material UI), state management, build tools, CMS generators, and analytics SDKs from rendered HTML/JS. |
| 6 | |
| 7 | ## Signals (input) |
| 8 | |
| 9 | - HTTP response bodies (HTML) |
| 10 | - JavaScript global variables (`window.*`) |
| 11 | - DOM attributes (`data-*`, `ng-*`, `_ngcontent-*`) |
| 12 | - Script src URL patterns (`/_next/`, `/wp-content/`, etc.) |
| 13 | - `<meta name="generator">` tags |
| 14 | - HTML comments |
| 15 | - CSS class patterns |
| 16 | - JSON-LD / structured data |
| 17 | - Source map exposure |
| 18 | |
| 19 | ## Inferences (output) |
| 20 | |
| 21 | - JS framework + version (e.g. React 18.2) |
| 22 | - Meta-framework (implies host framework — Next.js → React) |
| 23 | - CMS / static site generator (WordPress, Drupal, Hugo, Ghost) |
| 24 | - CSS framework + UI library |
| 25 | - Build tool (Webpack, Vite, Parcel) |
| 26 | - Analytics / tracking SDKs (GA, Mixpanel, Hotjar, FullStory) |
| 27 | - Source map exposure (security finding) |
| 28 | |
| 29 | ## Techniques |
| 30 | |
| 31 | See [reference/patterns.md](reference/patterns.md). |
| 32 | |
| 33 | ## When to use |
| 34 | |
| 35 | - Phase 2/3 of a tech-stack OSINT engagement |
| 36 | - Mapping client-side attack surface for XSS / DOM-based testing |
| 37 | - Validating CMS/version for CVE matching |
| 38 | - Identifying SaaS dependencies via third-party scripts |