Claude Flow Security

Scan codebases for CVEs, secrets, and AI manipulation threats.

1|Updated Feb 8, 2026

Search Tags:#security #threat modeling #vulnerability scanning #secrets detection #cve #ai defense

Ready to run

npx skills add https://github.com/ricable/cli-skills-builder --skill claude-flow-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Claude Flow Security
Source: https://github.com/ricable/cli-skills-builder/tree/main/.claude/skills/claude-flow-security
Command: npx skills add https://github.com/ricable/cli-skills-builder --skill claude-flow-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses critical security concerns in software development and AI interactions, including vulnerability detection, threat modeling, and protection against malicious AI manipulation.

Core Features & Use Cases

Vulnerability Scanning: Detects known CVEs and general security flaws in your codebase.
Secrets Detection: Identifies hardcoded secrets like API keys and passwords.
AI Defense: Protects against prompt injection and jailbreaking attacks.
Use Case: Before deploying a new feature, run a comprehensive security scan to identify and remediate potential vulnerabilities and ensure no sensitive information is exposed.

Quick Start

Run a full security scan on your project.

Frequently Asked Questions about Claude Flow Security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for CVEs and hardcoded secrets?▼

To scan your codebase for CVEs and hardcoded secrets, run a comprehensive security scan. This identifies known vulnerabilities, API keys, and passwords before deployment, utilizing programmatic APIs for integration into your workflows.

What is threat modeling and how does it protect against AI manipulation?▼

Threat modeling identifies potential security flaws in software and AI interactions. AI defense mechanisms specifically protect against malicious manipulation like prompt injection and jailbreaking attacks to secure your code and AI.

Can I integrate vulnerability scanning into my CI/CD pipelines?▼

Yes, you can integrate vulnerability scanning into CI/CD pipelines. The skill utilizes programmatic APIs designed for security workflows, allowing automated detection of CVEs and hardcoded secrets during the development lifecycle.

Does this security workflow support audit logging?▼

Yes, the security workflow supports audit logging. Alongside vulnerability detection and threat modeling, audit logging tracks security events to ensure comprehensive monitoring of your codebase and AI interactions.

When do I need to run a full security scan on my project?▼

You need to run a full security scan before deploying a new feature. This identifies and remediates potential vulnerabilities, detects exposed sensitive information, and ensures your codebase is secure against known CVEs.