security-check

Audit code changes for vulnerabilities and attack vectors.

7|1|Updated Jan 11, 2026
One-click install
npx skills add https://github.com/Nirusan/claude-config --skill security-check-nirusan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/Nirusan/claude-config/tree/main/skills/security-check
Command: npx skills add https://github.com/Nirusan/claude-config --skill security-check-nirusan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill acts as a vigilant security auditor, proactively identifying vulnerabilities and potential attack vectors within code changes before they can be exploited.

Core Features & Use Cases

  • Comprehensive Security Audits: Performs a deep dive into code for injection flaws, authentication/authorization issues, data exposure, and dependency vulnerabilities.
  • Proactive Vulnerability Detection: Catches security risks related to SQL, XSS, JWT, CSRF, hardcoded secrets, and more.
  • Use Case: Before committing changes that modify user authentication logic or database interactions, use this Skill to ensure no critical security gaps are introduced.

Quick Start

Perform a security audit on the current code changes, focusing on authentication and input validation.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on code changes to find vulnerabilities?

Run a security audit on code changes by using this Skill to perform a red-team analysis that identifies injection flaws, authentication issues, data exposure, and database security risks before deployment.

What is red-team security auditing for code vulnerabilities?

Red-team security auditing is a proactive process that identifies vulnerabilities and attack vectors within code changes, focusing on injection flaws, authorization issues, and data exposure to mitigate potential exploits.

Can I detect SQL injection and XSS vulnerabilities in my code before committing?

Yes, you can detect SQL injection and XSS vulnerabilities before committing by running this Skill to analyze code changes for security risks related to injection flaws and client-side threats.

Does this security audit check for hardcoded secrets and JWT vulnerabilities?

Yes, this security audit checks for hardcoded secrets and JWT vulnerabilities by reviewing authentication logic and authorization issues within your code changes to ensure adherence to security best practices.

What types of API security and database security risks does a code audit catch?

A code audit catches API security and database security risks by analyzing code changes for injection flaws, data exposure, and authorization issues to mitigate potential exploits.

When should I perform a penetration testing audit on my codebase?

You should perform a penetration testing audit on your codebase before committing changes that modify user authentication logic or database interactions to ensure no critical security gaps are introduced.