BeClaude

skill-security-auditor

New
GitHub TrendingGeneralby saroo98

Codex skill security scanner for auditing SKILL.md instructions, scripts, hooks, and repository files for suspicious behavior.

Summary

md instructions, scripts, hooks, and repository files for suspicious behavior, helping developers identify potential security risks in their codebase.

  • It acts as a proactive security auditor, flagging anomalies like hardcoded secrets, dangerous commands, or unauthorized modifications.

Install & Usage

1
Create the skills directory
mkdir -p .claude/skills
2
Download the skill file
mkdir -p .claude/skills && curl -o .claude/skills/skill-security-auditor.md https://raw.githubusercontent.com/saroo98/skill-security-auditor/main/SKILL.md
3
Invoke in Claude Code
/skill-security-auditor

Use Cases

Audit a SKILL.md file for suspicious instructions before executing it in a new project.
Scan repository hooks for malicious scripts that could compromise CI/CD pipelines.
Detect hardcoded API keys or passwords in configuration files across the codebase.
Review recent commits for unauthorized changes that introduce security vulnerabilities.
Check third-party scripts included in the project for obfuscated or dangerous code.
Validate that all repository files comply with your organization's security policies.

Usage Examples

1

/skill-security-auditor scan SKILL.md

2

/skill-security-auditor audit hooks/

3

Run a security audit on the entire repository with /skill-security-auditor --recursive

View source on GitHub
security

Security Audits

LicenseUnknownSourceWarnRepositoryPass

Frequently Asked Questions

What is skill-security-auditor?

This skill scans SKILL.md instructions, scripts, hooks, and repository files for suspicious behavior, helping developers identify potential security risks in their codebase. It acts as a proactive security auditor, flagging anomalies like hardcoded secrets, dangerous commands, or unauthorized modifications.

How to install skill-security-auditor?

To install skill-security-auditor: create the skills directory (mkdir -p .claude/skills), then run: mkdir -p .claude/skills && curl -o .claude/skills/skill-security-auditor.md https://raw.githubusercontent.com/saroo98/skill-security-auditor/main/SKILL.md. Finally, /skill-security-auditor in Claude Code.

What is skill-security-auditor best for?

skill-security-auditor is a skill categorized under General. It is designed for: security. Created by saroo98.

What can I use skill-security-auditor for?

skill-security-auditor is useful for: Audit a SKILL.md file for suspicious instructions before executing it in a new project.; Scan repository hooks for malicious scripts that could compromise CI/CD pipelines.; Detect hardcoded API keys or passwords in configuration files across the codebase.; Review recent commits for unauthorized changes that introduce security vulnerabilities.; Check third-party scripts included in the project for obfuscated or dangerous code.; Validate that all repository files comply with your organization's security policies..