Critical Checks — Security skill for Claude Code
Universal pre-commit safety audit that scans the diff for secrets, broken syntax, and auth mistakes and blocks the commit on any [CRITICAL] finding.
How to install Critical Checks
Installs to ~/.claude/skills/erickjvazquez-dev-selfimprove-kit-critical-checks/SKILL.md
mkdir -p ~/.claude/skills/erickjvazquez-dev-selfimprove-kit-critical-checks && curl -fsSL https://raw.githubusercontent.com/erickjvazquez-dev/selfimprove-kit/HEAD/commands/critical-checks.md -o ~/.claude/skills/erickjvazquez-dev-selfimprove-kit-critical-checks/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Critical Checks does
description: Universal pre-commit safety audit that scans the diff for secrets, broken syntax, and auth mistakes and blocks the commit on any [CRITICAL] finding.
/critical-checks — Universal Pre-Commit Safety Audit
Runs layered critical checks across any codebase before committing, deploying, or merging. Covers the failure patterns that have actually hurt this workspace.
Use after making any cross-cutting change (adding icons, replacing strings, touching YAML, adding endpoints). Take
Alternatives in Security
- Security Scan Report — Generated: 2026-04-10 20:48 UTC Skills scanned: 134 Total findings: 836 Critical: 32 High: 50 Safe skills: 100 18.1k ★
- Skill Audit — Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review 2.8k ★
- Engage.Cvediff — Find the canonical fix commit(s) for a CVE across sources, then diff for root cause 348 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
POC
Generate an executable proof-of-concept exploit for a confirmed High/Critical finding — detect the toolchain,
Security Audit Database
Use when auditing a database-backed app for the most common database security mistakes — multi-tenant data lea
Find Wasted Code
Run the find-wasted-code audit — the code-per-friction sibling of /token-waste-audit and /find-wasted-effort.
Commit Hook Checklist
Audit commit-hook automation as gates against AI slop and broken commits (Node.js, Go, polyglot)
API Security Review
OWASP API Security Top 10 (2023) review of REST, GraphQL, or gRPC APIs. Finds broken object-level auth, excess
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Related Agents
Security Advisor
Read-only security reviewer for auth, authz, payments, RLS, secrets, PII, and deletion. Writes every finding i
Cerberus
Security specialist. Invoke before any deploy, when handling auth/credentials, when secrets might be exposed,
Opensource Sanitizer
Pre-public-push safety net. Scans a diff or working tree for leaked secrets, PII, internal references, interna