Skill Security Check — Security skill for Claude Code
Run security audit on installed Claude Code skills.
How to install Skill Security Check
Installs to ~/.claude/skills/aliksir-claude-code-skill-security-check-skill-security-check/SKILL.md
mkdir -p ~/.claude/skills/aliksir-claude-code-skill-security-check-skill-security-check && curl -fsSL https://raw.githubusercontent.com/aliksir/claude-code-skill-security-check/HEAD/commands/skill-security-check.md -o ~/.claude/skills/aliksir-claude-code-skill-security-check-skill-security-check/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Skill Security Check does
description: Run security audit on installed Claude Code skills
/skill-security-check
Security audit for Claude Code community skills. Scans installed skills for prompt injection, data exfiltration, permission bypass, dangerous commands, and 29 additional attack patterns.
Trigger
`/skill-security-check` or "run a security check on my skills"
Target
Default: `~/.claude/skills/` (all installed skills)
If a specific path or skill name is provided, scope to that target only.
Alternatives in Security
- Fp Check — Trail of Bits security skill for fp check 3.7k ★
- Portaljs Check Data Quality — Audit a local or remote tabular file (CSV/TSV) for common data quality issues 2.3k ★
- Convex Security Check 354 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Docker Claude Code
new Run Claude Code in an isolated Docker container with multi-profile support, security hardening, best-pract
Skilldoctor
A linter + security scanner for AI-agent skill files — validate Claude Code SKILL.md / AGENTS.md / subagent fr
Compat Audit
On-demand Claude Code compatibility and feature parity report — compares installed version against the breakpo
Orca Agent Cleanup
Safely audit and quarantine Orca-installed agent skills, hooks, and CLI residue on Windows, macOS, and Linux.
Scan Cves
Run a focused nuclei CVE sweep against a host or recon directory, optionally filtered by year. Runs log4j-scan
Security
Validate wallet addresses and check token risk — honeypot detection, audit status, freeze authority, and secur
Related Agents
Dependency Vetter
Supply-chain security audit of a third-party package (npm today) at ONE exact resolved version, run BEFORE it
Security Review
This agent should be invoked when the user asks to review code for security vulnerabilities, check for secrets
Security Sidecar
Read-only background security audit sidecar for the current implementation scope. Use from implement-coordinat