Skill Security Auditor

A security-focused code reviewer that scans your codebase for vulnerabilities, insecure patterns, and compliance issues. You'd run this before deployments or as part of CI/CD to catch things like SQL injection risks, hardcoded secrets, weak crypto, and authentication flaws. It generates detailed reports with severity ratings and remediation suggestions. The approach is practical: it looks for real exploitable issues rather than overwhelming you with theoretical risks. Works across multiple languages and frameworks, though coverage varies. Best used as one layer in your security process, not a replacement for manual review or penetration testing.

skills.sh installs: 817
GitHub stars: 29.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add alirezarezvani/claude-skills --skill skill-security-auditor --agent claude-code

Installs into .claude/skills of the current project.

Files

Skill Security Auditor

Scan and audit AI agent skills for security risks before installation. Produces a clear PASS / WARN / FAIL verdict with findings and remediation guidance.

Quick Start

# Audit a local skill directory
python3 scripts/skill_security_auditor.py /path/to/skill-name/

# Audit a skill from a git repo
python3 scripts/skill_security_auditor.py https://github.com/user/repo --skill skill-name

# Audit with strict mode (any WARN becomes FAIL)
python3 scripts/skill_security_auditor.py /path/to/skill-name/ --strict

# Output JSON report
python3 scripts/skill_security_auditor.py /path/to/skill-name/ --json