goingli0324

Web Security Reviewer — Security skill for Claude Code

Security community

Claude Code skill: defensive security review of your own code (Apps Script, frontend, backend).

How to install Web Security Reviewer

This entry records only its repository, not the path inside it, so there is no exact command to give. Open goingli0324/web-security-reviewer and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Web Security Reviewer does

Claude Code skill: defensive security review of your own code (Apps Script, frontend, backend).

Alternatives in Security

Promptmap — Security scanner for custom LLM apps 1.2k ★
Maestro Odyssey — Long-running iterative cycle — one entry, seven modes (debug improve planex review security defensive ui) 530 ★
Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★

README

web-security-reviewer

A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code.

Covers Google Apps Script (Workspace automation), frontend HTML/CSS/JS, and backend APIs (Node/Python/PHP/etc.). Particularly useful for reviewing AI-generated / vibe-coded code before it ships.

This skill is defensive only: it finds and patches vulnerabilities in your own code, and will not help write weaponized exploits or bypass security controls.

Install

Clone this repo (or copy its contents) into your Claude Code skills directory, e.g.:

git clone https://github.com/goingli0324/web-security-reviewer.git ~/.claude/skills/web-security-reviewer

Claude Code will pick it up automatically based on the triggers described in `SKILL.md`.

SKILL.md — skill definition, triggers, and workflow
references/ — reference material loaded on demand depending on tech stack (Apps Script, frontend, backend, data leakage, dependency scanning, AI-generated code patterns, stress/performance, report format)