Heeler Security Review — Security skill for Claude Code
Perform a repository security review for the current project directory, including secrets exposure risk, dependency vulnerabilities, license/compliance risks, and operational hardening.
How to install Heeler Security Review
Installs to ~/.claude/skills/api-evangelist-heeler-heeler-security-review/SKILL.md
mkdir -p ~/.claude/skills/api-evangelist-heeler-heeler-security-review && curl -fsSL https://raw.githubusercontent.com/api-evangelist/heeler/HEAD/skills/heeler-security-review.md -o ~/.claude/skills/api-evangelist-heeler-heeler-security-review/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Heeler Security Review does
name: heeler-security-review description: Perform a repository security review for the current project directory, including secrets exposure risk, dependency vulnerabilities, license/compliance risks, and operational hardening. Use when users ask for a security posture review or prioritized remediation plan.
Heeler Security Review
Use this skill to run a structured security review of the repository/directory the user is currently working in.
This is a project security posture review
Alternatives in Security
- Harden — Run the harden skill to perform a systematic project hardening audit 1k ★
- MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★
- Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Dep Audit
Use when auditing project dependencies for staleness, license risks, upgrade paths, and health. Covers 'check
Review Dependency Risk
Audit dependency manifests for supply-chain risk: unmaintained or typosquatted packages, license conflicts, un
Heeler Scan All
Run a complete security scan workflow with Heeler: secrets, vulnerabilities, and license checks. Use when the
Heeler Vulnerabilities Scan
Run Heeler dependency vulnerability scanning and policy gating. Use when the user asks for CVE analysis, sever
License Audit
Audit the current repo's licensing and attribution — run its mechanical gates where present, then judgment che
Deps Health
Comprehensive dependency health audit with security and license info
Related Agents
Review Security
Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu
Review Risk
R1 Risk reviewer — security, privilege boundaries, data exposure, dependency risks, and merge-blocking vulnera
Hosting Security Auditor
Security review for cPanel-hosted sites - exposed secrets and .git directories, file permissions, .htaccess ha