Security Audit Web App
Description
--- name: security-audit-web-app description: Use when auditing a web app frontend/edge layer for common security mistakes — server vs client boundary leaks, environment variables exposed to the browser, missing security headers, unsafe redirects, dangerous HTML rendering, middleware that can be bypassed. Examples use Next.js + Vercel, but checks apply to any modern web framework (Remix, SvelteKit, Astro, Laravel, Rails). --- # Security audit — web app layer You're auditing a web app's fronten
Installation
Installs to ~/.claude/skills/bismillahinspiringquotes-eng-claude-code-kit-security-audit-web-app/SKILL.md
mkdir -p ~/.claude/skills/bismillahinspiringquotes-eng-claude-code-kit-security-audit-web-app && curl -fsSL https://raw.githubusercontent.com/bismillahinspiringquotes-eng/claude-code-kit/HEAD/skills/security-audit-web-app.md -o ~/.claude/skills/bismillahinspiringquotes-eng-claude-code-kit-security-audit-web-app/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
Full documentation available on GitHub
View Source RepositoryRelated Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,