Airsec — Security skill for Claude Code
Find Security Issues in your code by using coding CLIs like Claude, Codex & CommandCode.
How to install Airsec
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open bas3line/Airsec and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Airsec does
Find Security Issues in your code by using coding CLIs like Claude, Codex & CommandCode.
Alternatives in Security
- Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
- OpenTag — Open-source, channel-native agent gateway for Slack 499 ★
- Security Check — Scan project for security issues — exposed secrets, missing .gitignore entries, unsafe patterns 335 ★
README
airsec
**State-of-the-art security review, driven by the coding CLI you already have.**
Claude Code · Codex · OpenCode · Command Code
[](https://github.com/bas3line/Airsec/actions/workflows/ci.yml) [](LICENSE) [](#requirements)
No new API key. No cloud upload. No third-party scanner. airsec drives the agent already installed on your machine through a structured, multi-pass security audit, then turns the result into a report you can act on.
Quick start
npx airsec@latest init
That is the whole thing. `init` walks you through it: pick the folder, pick your coding CLI, pick the model, choose review-or-fix, and it runs.
Other ways to installnpm install -g airsec # global
pnpm add -g airsec
bun add -g airsec
yarn global add airsec
airsec init # then run it anywhere
No `curl | sh` installer, deliberately: a tool that audits your code for supply-chain risk should not ask you to pipe a URL into a shell.
GettingETARGET · No matching version found?
Your npm is pointed at a mirror that has not synced the release yet. Check with `npm config get registry` — if it is anything other than `https://registry.npmjs.org`, either wait for the mirror to catch up or bypass it:
npx --registry=https://registry.npmjs.org airsec@latest init # one-off
npm config set registry https://registry.npmjs.org # permanently
Requirements
- Node ≥ 20 (the published bundle has zero runtime dependencies)
- At least one supported coding CLI on your
PATH— check withnpx airsec harness
60 seconds, end to end
npx airsec harness
Related Skills
Skillen
Audit your AI coding skills using your real conversation history — find the toxic ones wasting tokens. Support
Claudrunner
Autonomous AI coding agent: finds bugs and security holes, fixes your Jira, Trello, GitHub Issues or Linear ti
Gsd Audit Fix
Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit
Zorille
Four Claude Code skills for codebase hygiene: codebase-audit (find issues) + plan-fixes (turn issues into PR-s
Loongsuite Pilot
Local-first telemetry collector for AI coding agents — unified OpenTelemetry events for Claude Code, Codex, Cu
Acs
ACS (Agnostic Config Suites) — AI coding agent skill system. 25+ auto-activating skills for Claude Code, Herme
Related Agents
Abtop
AI agent monitor for your terminal. Like btop++, but for AI coding agents. Supports Claude Code and Codex CLI.
Runtime Bug Audit
Find runtime bugs and error handling issues. NOT for security vulnerabilities (use security-auditor for that).
CodexResearcher
Remy - Eccentric, curiosity-driven technical archaeologist who treats research like treasure hunting. Consults