afc:security

Scan codebases for OWASP Top 10 vulnerabilities with read-only analysis.

7|Updated Feb 19, 2026
One-click install
npx skills add https://github.com/jhlee0409/all-for-claudecode --skill afc-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: afc:security
Source: https://github.com/jhlee0409/all-for-claudecode/tree/main/skills/security
Command: npx skills add https://github.com/jhlee0409/all-for-claudecode --skill afc-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and reports security vulnerabilities within your codebase, helping you proactively address risks before they can be exploited.

Core Features & Use Cases

  • Vulnerability Detection: Scans code against OWASP Top 10 and other common security threats.
  • Read-Only Analysis: Performs a comprehensive security review without making any code modifications.
  • Use Case: Before deploying a new feature, run this security scan to ensure no critical vulnerabilities like SQL injection or broken authentication are present.

Quick Start

Run a full security scan on the entire codebase.

Frequently Asked Questions about afc:security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities before deployment?

To scan your codebase for security vulnerabilities, perform a read-only analysis that checks against OWASP Top 10 categories like injection and broken authentication. This process detects threats proactively without modifying any existing code.

What is a read-only security scan and how does it identify vulnerabilities?

A read-only security scan analyzes your code without making modifications to detect vulnerabilities. It checks for common security threats like broken authentication and sensitive data exposure by integrating with your project context for framework-specific considerations.

Can I run a targeted security scan on a specific file or directory path?

Yes, you can run a targeted security scan on a specific file or directory path. This allows you to focus the vulnerability detection on particular areas of your codebase rather than executing a full repository scan.

Does the security scan cover OWASP Top 10 threat assessments like SQL injection?

Yes, the security scan covers OWASP Top 10 threat assessments including SQL injection, broken authentication, and sensitive data exposure. It scans code to help you proactively address these common security risks before exploitation.

What are the limitations of automated code security scans?

Automated code security scans are limited to read-only analysis and do not modify code to fix vulnerabilities. They detect common security threats across various categories but require manual intervention to resolve any identified risks.