kalshamsi/claude-security-skills

1

api-security-tester Use when auditing REST or GraphQL API endpoints, checking API authentication and authorization, hunting BOLA or broke…

kalshamsi/claude-security-skills

23

2

security-headers-audit Use when reviewing HTTP security headers, checking a Content-Security-Policy, auditing CORS or HSTS configuration, ev…

kalshamsi/claude-security-skills

23

3

bandit-sast Use when scanning Python code for security vulnerabilities, running Bandit, performing Python SAST, auditing Python s…

kalshamsi/claude-security-skills

19

4

crypto-audit Use when reviewing code for weak encryption, hardcoded cryptographic keys, insecure TLS/SSL configuration, broken has…

kalshamsi/claude-security-skills

19

5

devsecops-pipeline Use when setting up security scanning in CI/CD, adding SAST/SCA/secrets/container scanning to a GitHub Actions workfl…

kalshamsi/claude-security-skills

19

6

security-test-generator Use when writing security tests for a web application, building a vulnerability regression suite, creating pentest-st…

kalshamsi/claude-security-skills

18

7

docker-scout-scanner Use when scanning Docker images for CVEs, auditing Dockerfiles for misconfigurations, reviewing base image choices, g…

kalshamsi/claude-security-skills

17

8

mobile-security Use when auditing an Android or iOS application for security issues, reviewing React Native or Flutter code, checking…

kalshamsi/claude-security-skills

17

9

socket-sca Use when scanning project dependencies for supply-chain risk, running Socket SCA on npm/pip/pypi packages, hunting ty…

kalshamsi/claude-security-skills

16

10

pci-dss-audit Use when auditing code for PCI-DSS v4.0 compliance, reviewing cardholder data handling, checking credit-card storage …

kalshamsi/claude-security-skills

15

11

your-skill-name Use when [trigger conditions]. Performs [what it does] for [target language/framework].

kalshamsi/claude-security-skills

14