Seatbelt — Development skill for Claude Code
Pre-ship safety check.
How to install Seatbelt
Installs to ~/.claude/skills/codegobrrrr9-seatbelt-seatbelt/SKILL.md
mkdir -p ~/.claude/skills/codegobrrrr9-seatbelt-seatbelt && curl -fsSL https://raw.githubusercontent.com/codegobrrrr9/seatbelt/HEAD/commands/seatbelt.md -o ~/.claude/skills/codegobrrrr9-seatbelt-seatbelt/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Seatbelt does
description: Pre-ship safety check. Scans for leaked keys, unprotected tables, open routes and CORS, then fixes what it can and reports READY or NOT READY in plain English. allowed-tools: Bash(node:*), Read, Edit, Write, Grep, Glob
Run the seatbelt pre-ship check on this project.
- Run the scanner from the project root:
node ${CLAUDE_PLUGIN_ROOT}/skills/seatbelt/scripts/scan.js . --json(if that path does not exist, findscan.jsunder the installed seatbelt skill directory).
Alternatives in Development
- Om Tidy — Self-maintenance pass — acts on every hygiene flag: archives completed work, groups loose clusters, splits ove 4.6k ★
- CORS — Scan an endpoint for CORS misconfiguration — arbitrary-origin reflection, null-origin trust, credential exposu 4.5k ★
- Claudecode — Open Source ClaudeCode Leaked 1k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Infra Status
Shortcut that loads the infra-copilot status skill — read-only health check that scans every manifest step and
Harden Auth
Deployment hardening step 2 — review auth/session/authz surfaces. Identifies insecure cookies, broad CORS, mis
StackRadar
StackRadar: free local dev dashboard + network firewall. Find every repo, run command & open port, catch leake
PDF Text Router
A Claude Code hook that routes each Read on a PDF to the path that actually works: text layer to UTF-8 text, s
Check Actions
Refresh ACTION_REQUIRED.md for a product — scans .env (key-name + emptiness mode by default; no values exposed
Pantheon Optimize
Scan, clean, cache, and archive Pantheon project files. Scans for bloat, archives completed deepwork, migrates
Related Agents
Opensource Sanitizer
Pre-public-push safety net. Scans a diff or working tree for leaked secrets, PII, internal references, interna
Secret Scanner
PYA specialist spawned by the /pya orchestrator. Finds hardcoded and leaked credentials in an untrusted reposi
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr