h0p3sf4ll

Client Security Review — Security skill for Claude Code

Security community

Review browser, SPA, Electron, and mobile trust boundaries: DOM, origins, IPC, navigation, storage, and server enforcement.

How to install Client Security Review

Installs to ~/.claude/commands/h0p3sf4ll-threatlint-client-security-review.md

Terminal
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/commands/client-security-review.md -o ~/.claude/commands/h0p3sf4ll-threatlint-client-security-review.md

Restart Claude Code, or start a new session, for it to be picked up.

What Client Security Review does

description: "Review browser, SPA, Electron, and mobile trust boundaries: DOM, origins, IPC, navigation, storage, and server enforcement." argument-hint: "Optional client, renderer, bridge, component, or redacted evidence path"

Delegate to `appsec-client-security-reviewer`. Pass `$ARGUMENTS` as the scope and supplied evidence locations.

Load `threatlint-evidence-analysis`, `threatlint-actionable-reporting`, then `threatlint-client-security`. Trace attacker input through rendering/origi

Alternatives in Security

Full documentation available on GitHub

View Source Repository

Related Skills

Client Security Review Local — Security skill for Claude Code

Client Security Review Local

Review browser, Electron, or mobile source evidence using an LM Studio snapshot model; no browser/app or test

Security community
Security Audit Web App — Security skill for Claude Code

Security Audit Web App

Use when auditing a web app frontend/edge layer for common security mistakes — server vs client boundary leaks

Security community
Neuron Inspector — Security skill for Claude Code

Neuron Inspector

64 tools for AI agents. Turn Chrome into an MCP server — inspect DOM, automate clicks, audit security, mock AP

Security community
Security Skills — Security skill for Claude Code

Security Skills

Two skills for reviewing what you are about to trust: an AppSec/CloudSec/CI-CD review pass, and an audit that

Security community
Threat Model Skill — Security skill for Claude Code

Threat Model Skill

Claude Code skill: write the project's security constitution (assets, roles, trust boundaries, invariants, ent

Security community
Skillbadge — Security skill for Claude Code

Skillbadge

In-browser trust scanner for AI agent skills (SKILL.md) — security heuristics + shareable badge

Security community

Related Agents

Appsec Client Security Reviewer — Security agent for Claude Code

Appsec Client Security Reviewer

Use for browser, SPA, Electron, and mobile-client security review: DOM injection, origins, messaging and IPC,

Security community
Tux — Security agent for Claude Code

Tux

Security hardening agent for auditing and fortifying MAGI's attack surface — the proxy layer, Electron securit

Security community
Fec Security Reviewer — Security agent for Claude Code

Fec Security Reviewer

Focus on front-end and browser-side security reviews: XSS, client key leaks, dangerous DOM/API usage, third-pa

Security community