Security Audit

This runs a structured security audit on your codebase, checking for everything from hardcoded credentials and SQL injection to missing CSRF protection and outdated dependencies. It scans your files against a three-tier checklist (critical, medium, low severity), then generates a detailed report with specific line numbers, attack scenarios, and before/after code fixes for each issue. The output format is thorough, maybe even verbose, but that's the point when you need to hand security findings to your team. Best used when you're preparing for a release, onboarding legacy code, or just want to catch the obvious security mistakes before they become incidents. It won't replace dedicated security tools but gives you a solid first pass.

Install to Claude Code

npx -y skills add laolaoshiren/claude-code-skills-zh --skill security-audit --agent claude-code