Eval Security — Security skill for Claude Code
/eval-security — Standalone Security Scan.
How to install Eval Security
Installs to ~/.claude/skills/evol-ai-skillcompass-eval-security/SKILL.md
mkdir -p ~/.claude/skills/evol-ai-skillcompass-eval-security && curl -fsSL https://raw.githubusercontent.com/Evol-ai/SkillCompass/HEAD/commands/eval-security.md -o ~/.claude/skills/evol-ai-skillcompass-eval-security/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Eval Security does
/eval-security — Standalone Security Scan
**Locale**: All templates in this spec are written in English. Detect the user's language from the session and translate user-facing text at display time per SKILL.md's Global UX Rules. Dimension labels: see the canonical table in SKILL.md.
Arguments
(required): Path to the SKILL.md file to scan.--verbose(optional): Show detailed findings including low severity.
Steps
Step 1: Load Target
Parse arguments. Use the **Rea
Alternatives in Security
- Security Scan Report — Generated: 2026-04-10 20:48 UTC Skills scanned: 134 Total findings: 836 Critical: 32 High: 50 Safe skills: 100 18.1k ★
- Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Sovereign Skills
20 production-grade skills for AI coding agents — setup, scope, discipline, code review, security, session man
Claude Skill Suite
Claude Code skills for running models cost-effectively: security gates (secret scanner, commit-gate), model-qu
Draw
Run the anti-pattern selector standalone to verify the rotation rule and audit log.
Audit E2e
Audit end-to-end test coverage of critical Playwright paths. Identifies missing flows, flaky tests, slow suite
Audit Tests
Audit unit and integration test coverage, quality, and CI performance across all packages and apps. Outputs a
Eval Audit
/eval-audit — Batch Skill Evaluation
Related Agents
Tcex Orchestrator
Orchestrator for all TcEx 4.0 development tasks — framework/library code, the V3 API code generator, pytest te
Security Advocate
Council archetype — the assume-breach advisor. Dispatched only by the rc-council skill, which holds each arche
Angular Enterprise
Senior Angular engineer for enterprise frontends on the current Angular major: standalone architecture, signal