ToruAI

What Skeletons Are Hiding In Node Modules? — Security agent for Claude Code

Security community intermediate

npm audit --json 2>/dev/null true cargo audit 2>/dev/null true pip-audit 2>/dev/null true grep -rn "password\ secret\ api_key\ token\ private_key" --include=".py" --include=".js" --include=.

How to install What Skeletons Are Hiding In Node Modules?

This entry records only its repository, not the path inside it, so there is no exact command to give. Open ToruAI/toru-claude-agents and copy the folder into ~/.claude/agents/.

What What Skeletons Are Hiding In Node Modules? does

npm audit --json 2>/dev/null true cargo audit 2>/dev/null true pip-audit 2>/dev/null true grep -rn "password\ secret\ api_key\ token\ private_key" --include=".py" --include=".js" --include=.

One of 2 entries listed from ToruAI/toru-claude-agents. The repository README describes the whole collection, not this agent — read it on GitHub.

Alternatives in Security

Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
Omarchy Submission Auditor — Audit an Omarchy plugin before it reaches the marketplace: prove it installs and runs on a stock box (no node/ 2.7k ★
Paperclip Reviewer — Paperclip 2026.529+ governance-first integration platform code review specialist — control plane + adapters tw 104 ★