claude

security-code-audit

Security-focused code review toolkit using grepai semantic search

2 on GitHubby Muh. Fani Rama Akbarv0.1.0updated 26 days agosecurity
/

Plugin security-code-audit from marketplace mfakbar127-skills in mfakbar127/agent-skills. Commands read from the repo's manifest — 25 days ago.

What it installs

Skills (7)

  • security-code-audit-ask

    This skill should be used when the user asks to "check authentication", "understand security patterns", "find input validation", "how does auth work", "where is user input validated", "what encryption is used", or investigating security flows and patterns.

  • security-code-audit-mr

    This skill should be used when the user asks to "review MR for security", "check PR for vulnerabilities", "security review merge request", "review pull request for security", "audit merge request", or provides a GitLab/GitHub MR/PR URL.

  • security-code-audit-review-diff

    This skill should be used when the user asks to "review PR for security", "check staged changes", "security review diff", "pre-commit security check", "review recent changes", or analyzing security impact of git diffs.

  • security-code-audit-review-file

    This skill should be used when the user asks to "review this file for security", "check file for vulnerabilities", "security analyze file", or mentions specific files like "review auth.py", "check login handler".

  • security-code-audit-review-full

    This skill should be used when the user asks to "full security audit", "complete codebase review", "security scan entire project", "comprehensive security analysis", or needs full coverage of all code files.

  • security-code-audit-review

    This skill should be used when the user asks to "security review", "vulnerability scan", "security audit", "check for vulnerabilities", "find security issues", "penetration test", "code security", or mentions specific vulnerabilities (SQL injection, XSS, command injection, buffer overflow, reentranc

  • security-code-audit-trace

    This skill should be used when the user asks to "trace data flow", "track user input", "find where data goes", "source to sink", "trace from input", "trace to sink", or investigating injection vulnerabilities and sanitization gaps.

Slash commands (3)

  • /security-code-audit:security-code-audit-index

    Initialize grepai semantic index for the codebase. Run this before first-time security reviews to enable semantic search capabilities.

  • /security-code-audit:security-code-audit-setup

    Set up and verify the security review system. Checks grepai installation, Ollama for local embeddings.

  • /security-code-audit:security-code-audit-update

    Update the grepai semantic index for the codebase. Run when files have changed and you need fresh semantic search results.

Subagents (1)

  • security-code-audit-reviewer

    Use this agent when the user explicitly requests a security review, vulnerability scan, or security analysis. This agent is reactive and only triggers on direct requests. Examples:

View source on GitHub

More from mfakbar127/agent-skills

All 3 plugins →

openapi-security-test

claude

End-to-end OpenAPI security testing pipeline covering all OWASP API Top 10 2023 categories. Generates and runs Gherkin or Hurl test suites from any OpenAPI/Swagger spec.

10 skills

2

python-dependency-threat-scan

claude

Python supply chain security scanner for detecting malicious packages, typosquatting, and persistence mechanisms through static analysis and system inspection

1 skill

2

Similar plugins

mattpocock-skills

claude

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

academic-research-skills

claude

5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.

5 skills · 16 commands · 4 agents · hooks

Imbad0202/academic-research-skills 56,698

Open Code Review

codex

Use Alibaba Open Code Review from local Codex.

2 skills

alibaba/open-code-review 50,068

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security-code-audit?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins3 plugins