skill-security-auditor
by alirezarezvani (GitHub) in alirezarezvani/claude-skills
What it does
Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4)
Quoted from the skill's SKILL.md under its MIT license.
Our basic check found 4 pattern(s) worth a look, like shell pipes or credential paths. This is not proof of harm. Read the files before you install.
Install
git clone --depth 1 https://github.com/alirezarezvani/claude-skills.git /tmp/claude-skills mkdir -p ~/.claude/skills/ cp -r /tmp/claude-skills/engineering/skills/skill-security-auditor ~/.claude/skills/skill-security-auditor
The command copies the skill from the author's repo. SkillTrove does not host it.
Files
- SKILL.md
- references/threat-model.md
- scripts/skill_security_auditor.py
Source: https://github.com/alirezarezvani/claude-skills/tree/main/engineering/skills/skill-security-auditor. Checked 2026-10-13.
Similar skills
code-review-and-quality
Conducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to ...
code-simplification
Simplifies code for clarity. Use when refactoring code for clarity without changing behavior. Use when code works but is harder to read, maintain, or extend ...
doubt-driven-development
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption cross-examined before proceedi...
git-workflow-and-versioning
Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, splitting uncommitted work in a mess...
idea-refine
Refines raw ideas into sharp, actionable concepts through structured divergent and convergent thinking. Use when an idea is still vague, when you need to str...
security-and-hardening
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or exte...