h0p3sf4ll

API Security Review Local — Security skill for Claude Code

Security community

OWASP API Security Top 10 review using a local LM Studio model.

How to install API Security Review Local

Installs to ~/.claude/commands/h0p3sf4ll-threatlint-api-security-review-local.md

Terminal
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/commands/api-security-review-local.md -o ~/.claude/commands/h0p3sf4ll-threatlint-api-security-review-local.md

Restart Claude Code, or start a new session, for it to be picked up.

What API Security Review Local does

OWASP API Security Top 10 review using a local LM Studio model.

Alternatives in Security

  • Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★
  • Security Audit Stride — Chạy checklist bảo mật OWASP Top 10 + STRIDE trước bước review cuối của Tech Lead trong WF-REVIEW-CRIT (luôn c 90 ★
  • API Contract Review — API platform contract review 83 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Auth Review Local — Security skill for Claude Code

Auth Review Local

Deep-dive auth security review using a local LM Studio model. OAuth, JWT, sessions, CSRF, MFA, RBAC, multi-ten

Security community
Cicd Audit Local — Security skill for Claude Code

Cicd Audit Local

CI/CD pipeline security audit using a local LM Studio model. No API key required.

Security community
AgentDoctor — Security skill for Claude Code

AgentDoctor

Local CLI that audits coding-agent configuration for security, instructions, context, and MCP — no API key or

Security community
API Security — Security skill for Claude Code

API Security

API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-

Security community
Security Review — Security skill for Claude Code

Security Review

Review code for security vulnerabilities (OWASP Top 10)

Security community
Owasp Security — Security skill for Claude Code

Owasp Security

OWASP Top 10:2025, ASVS 5.0, and Agentic AI security (2026) with code review checklists, secure patterns, and

Security community

Related Agents

QA Security Tester — Security agent for Claude Code

QA Security Tester

Security-minded QA tester for AUTHORIZED targets only (the user's own app, local/staging). Performs non-destru

Security community
API Security Tester — Security agent for Claude Code

API Security Tester

Generates and runs comprehensive API security tests covering OWASP Top 10, injection attacks, auth bypass, mal

Security community
Timps API Security Tester — Security agent for Claude Code

Timps API Security Tester

Run an OWASP API Security Top-10 (2023) audit against an OpenAPI spec or live endpoint — broken auth, BOLA, ma

Security community