skills.rest
lauvsong
lauvsongCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

claude-security-review

Audit Claude Code settings.json, guardrail.py, and safety rules for security gaps.

35|3|Updated Mar 15, 2026
Search Tags:#security#review#policy#code-analysis#guardrail#settings.json
One-click install
npx skills add https://github.com/lauvsong/claude-soul --skill claude-security-review-lauvsong
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: claude-security-review
Source: https://github.com/lauvsong/claude-soul/tree/main/skills/claude-security-review
Command: npx skills add https://github.com/lauvsong/claude-soul --skill claude-security-review-lauvsong

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Claude Code security settings to identify gaps and misconfigurations across key policy layers (settings.json, guardrail.py, and rules/).

Core Features & Use Cases

  • Check settings.json, hooks/guardrail.py, and rules/01-safety-approvals.md for consistency and proper guardrail coverage.
  • Run a structured checklist-based evaluation to detect misconfigurations, missing protections, and inconsistent secret handling.
  • Use during security reviews, pre-release checks, and compliance audits to validate defense-in-depth for Claude Code.

Quick Start

Run the Claude Security Review skill to audit settings.json, guardrail.py, and rules/01-safety-approvals.md for consistency and potential vulnerabilities.

Frequently Asked Questions about claude-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Claude Code security settings for misconfigurations?▼

You can audit Claude Code security settings by running a structured checklist evaluation across settings.json, hooks/guardrail.py, and rules/01-safety-approvals.md to detect misconfigurations and missing protections.

What does a security guardrail review check for in settings.json?▼

A security guardrail review checks settings.json for centralized guardrails, proper secret protection, and blocked destructive actions to ensure defense-in-depth and validate compliance during pre-release checks.

How do I validate defense-in-depth policies before a release?▼

You validate defense-in-depth policies by applying a structured security review to your rules and guardrails, generating clear pass, fail, or warn outcomes for misconfigurations and missing protections.

Can I use a checklist-driven evaluation for my code analysis guardrails?▼

Yes, you can use a checklist-driven evaluation to perform a structured code analysis of your guardrails, ensuring your hooks and safety rules consistently block destructive actions and protect secrets.

Why does my guardrail.py show inconsistent secret handling?▼

Inconsistent secret handling in guardrail.py occurs when your policy layers lack centralized guardrails, which a structured security audit identifies by evaluating settings.json and safety rules for gaps.

Related Skills

Explore More Software Engineering Skills→
pur3v4d3rpur3v4d3r
6

claude-settings-expert

Configure Claude Code settings.json, permissions, sandbox, environment variables, and hooks.

Community
Advanced
alo-expalo-exp
6

gsd-secure

Audit code, configuration, and infrastructure changes against OWASP security best practices.

Official
Advanced
baphledbaphled
1

static-analysis

Guide static code analysis tools to detect bugs, vulnerabilities, and style violations.

Community
Intermediate
PostHogPostHog
58

exploring-llm-evaluations

Inspect and manage Hog and llm_judge evaluation configurations on PostHog.

Official
Advanced