Bobby Security — Security skill for Claude Code
Security audit — OWASP + STRIDE analysis on code changes.
How to install Bobby Security
Installs to ~/.claude/commands/ccevans-bobbycode-bobby-security.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/ccevans/bobbycode/HEAD/.claude/commands/bobby-security.md -o ~/.claude/commands/ccevans-bobbycode-bobby-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Bobby Security does
description: "Security audit — OWASP + STRIDE analysis on code changes" argument-hint: ""
Load and follow the skill in `.claude/skills/bobby-security/SKILL.md` to run a security audit on the specified ticket's code changes.
Alternatives in Security
- Claude Code Security Review — An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities 3.9k ★
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
- Skill Threat Modeling — Code-First Deep Risk Analysis Skill for Claude Code - 8-Phase Workflow with Security design review, STRIDE Thr 207 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Audit Infra
Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE. Complem
Security Audit Stride
Chạy checklist bảo mật OWASP Top 10 + STRIDE trước bước review cuối của Tech Lead trong WF-REVIEW-CRIT (luôn c
J Audit
Security threat model and vulnerability scan — STRIDE analysis, SAST patterns, and compliance mapping. Use whe
Claude Skill Security Check
Claude Code skill: security audit on pending branch changes — anti-vibe-coding checklist + OWASP practices
Security Playbook
Security skill pack for AI coding agents — behavioral guardrails, OWASP code/LLM rules, static analysis guidan
Bobby Lighthouse
Lighthouse audit — sweep the four pillars across page templates and propose tickets
Related Agents
Harness Security Reviewer
Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input
Pan Hardener
Security audit agent — OWASP Top 10 + STRIDE threat modeling across files changed in a phase. Read-only. Spawn
Gstack Security
Security auditor for the gstack builder framework using OWASP Top 10 and STRIDE.