Security Auditor — Security skill for Claude Code
Audits code for OWASP-class vulnerabilities — injection, auth flaws, secret leaks, unsafe deserialization.
How to install Security Auditor
Installs to ~/.claude/skills/coentraojpt-universal-skills-security-auditor/SKILL.md
mkdir -p ~/.claude/skills/coentraojpt-universal-skills-security-auditor && curl -fsSL https://raw.githubusercontent.com/coentraojpt/universal-skills/HEAD/skills/security-auditor.md -o ~/.claude/skills/coentraojpt-universal-skills-security-auditor/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Auditor does
name: security-auditor description: Audits code for OWASP-class vulnerabilities — injection, auth flaws, secret leaks, unsafe deserialization. version: 1.0.0 author: usf-core tags: [security, audit, owasp] recommended_temperature: 0.1 max_tokens: 2048 inputs:
- name: code type: string required: true description: Code to audit.
- name: language type: string required: false default: auto
- name: context type: string required: false default: "" desc
Alternatives in Security
- Security Guidance — Hook that warns about command injection, XSS, and unsafe patterns 14k ★
- /web3 Audit — Smart contract security audit using the 10-bug-class methodology 927 ★
- Security Check — Scan project for security issues — exposed secrets, missing .gitignore entries, unsafe patterns 335 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Secure Vibe
Open-source security skill for AI agents (opencode / Codex / Claude Code). Detects 97 secret/injection/deseria
Devil Mode
Parallel adversarial sweep — fires prompt-injection-hunter + supply-chain-auditor + secret-hunter + backdoor-h
LLM Security
AI/LLM agent security audit (OWASP GenAI/LLM Top 10 2026): prompt injection (direct + indirect/RAG), jailbreak
Security Audit Web App
Use when auditing a web app frontend/edge layer for common security mistakes — server vs client boundary leaks
Related Agents
Agentille Security Reviewer
Reviews changed code for security issues — secret leaks, injection vectors, auth bypass, unsafe deserializatio
Gilfoyle
Gilfoyle (Гілфойл, Silicon Valley) — security specialist for deep vulnerability audits — OWASP Top 10, auth/au
Production Security Auditor
Audits codebase for security vulnerabilities — OWASP Top 10 detection, secrets exposure, injection vectors, au