# Exposed Build Artifacts and Debug Files

> Detects build artifacts, debug information, and development files committed to version control or accessible in production.

- Skill: `zakirkun/exposed-build-artifacts-and-debug-files` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add zakirkun/exposed-build-artifacts-and-debug-files`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zakirkun/exposed-build-artifacts-and-debug-files/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: zakirkun (https://skillmd.com/u/zakirkun)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zakirkun/exposed-build-artifacts-and-debug-files

---


# Exposed Build Artifacts and Debug Files

## Overview
Build artifacts, debug symbols, and development configuration files accidentally committed or deployed expose internal application structure and potentially sensitive logic. Common exposures:
- `.map` source map files in production (exposes original source)
- `*.pdb` debug symbol files
- `node_modules/` committed to git
- `.DS_Store` files leaking directory structure
- `TODO`, `FIXME` comments with security implications

## Remediation
- Add build artifacts to `.gitignore`
- Disable source map generation in production builds
- Serve content with proper `X-Content-Type-Options: nosniff` headers