security-skills-claude-code
Threat research, SAST rule generation, and secure code review
All Skills in This Repository (9)
Pure Emerald Level Indicators
Security-Phoenix-democti-domain-research
Conduct structured web searches across curated security domains for CTI research.
Security-Phoenix-demoopengrep-rule-generator-research
Generate opengrep/semgrep SAST rules from CVEs, CWEs, or code snippets.
Security-Phoenix-demoprd-generator
Generate security-focused PRDs with STRIDE threat modeling from feature descriptions.
Security-Phoenix-demonotebooklm
Query Google NotebookLM for citation-backed answers from uploaded documents.
Security-Phoenix-demoopengrep-rule-generator
Generate and analyze opengrep/semgrep SAST rules for security vulnerabilities.
Security-Phoenix-demosecurity-reviewer
Automate security reviews across multiple programming languages using ripgrep patterns.
Security-Phoenix-demothreat-modeling-agent
Automate threat modeling with STRIDE and DREAD methodologies.
Security-Phoenix-democomprehensive-security-assessment
Check code repositories for OWASP Top 10 2025 and ASVS Level 1 compliance violations.
Security-Phoenix-demo0day-scanner
Scan commits, pull requests, or files for potential zero-day vulnerabilities.
Frequently Asked Questions
FAQPage SchemaHow to install security-skills-claude-code?▼
Run `npx skills add Security-Phoenix-demo/security-skills-claude-code --all -g -y` in your terminal to install all security skills globally.
How to research a CVE with threat intelligence?▼
Use the CTI Domain Research skill to search 595+ curated security sources like CISA, NVD, and Unit42, returning ranked findings with IOCs and MITRE ATT&CK mapping.
Can it generate semgrep rules automatically?▼
Yes. The OpenGrep Rule Generator creates tested SAST rules for 30+ languages from CVEs, CWEs, or plain vulnerability descriptions, with built-in false positive reduction.
Does it work with Claude Code and Cursor?▼
Yes. All skills follow the universal SKILL.md standard and run in Claude Code, Cursor, and other compatible coding environments.
Can non-security engineers use these skills?▼
Yes. You describe what you need in plain English, and the skills handle threat modeling, secure PRD creation, and code review automatically.
Related Repositories in Software Engineering
View All in Software Engineering→
openclawopenclaw
Run a personal AI assistant across your devices and chat apps
obrasuperpowers
Gives coding agents a disciplined workflow from idea to merged code
facebookreact
AI agent skills for building, testing, and porting React core