notambourine

Wormhook Setup — Security skill for Claude Code

Security community

Interactively set up wormhook's out-of-Claude scanning (CLI, git-pull audit, hourly sweep, scan roots).

How to install Wormhook Setup

Installs to ~/.claude/skills/notambourine-wormhook-wormhook-setup/SKILL.md

Terminal
mkdir -p ~/.claude/skills/notambourine-wormhook-wormhook-setup && curl -fsSL https://raw.githubusercontent.com/notambourine/wormhook/HEAD/commands/wormhook-setup.md -o ~/.claude/skills/notambourine-wormhook-wormhook-setup/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Wormhook Setup does

description: Interactively set up wormhook's out-of-Claude scanning (CLI, git-pull audit, hourly sweep, scan roots) allowed-tools: Bash, AskUserQuestion

Run the wormhook out-of-band setup wizard. Goal: cover this machine outside Claude Code with an on-demand `wormhook-scan` CLI, a git-pull audit, and an hourly local sweep. The detection engine is unchanged; you are wiring up triggers.

0. Resolve the CLI script

Set `SCRIPT` to the first of these that exists, then use it for every co

Alternatives in Security

  • Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
  • Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
  • AWS MCP Server — by alexei-led - Features multiple Python environment setup options with detailed code style guidelines, compre 182 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Vuln Scan — Security skill for Claude Code

Vuln Scan

Multi-agent security vulnerability sweep — fans out region-scoped hunters, verifies findings, and reports

Security community
Audit End Sprint — Security skill for Claude Code

Audit End Sprint

End-of-sprint code audit — run 9-dimension sweep (security, quality, tests, dead code, TODO/FIXME, perf, docs,

Security community
Fable Skills — Security skill for Claude Code

Fable Skills

Five skills Fable wrote before it left: the security sweep, the setup, the build planner, the honest advisor,

Security community
Scan Cves — Security skill for Claude Code

Scan Cves

Run a focused nuclei CVE sweep against a host or recon directory, optionally filtered by year. Runs log4j-scan

Security community
Orchestrate Consult — Security skill for Claude Code

Orchestrate Consult

Run an independent external audit of a completed ZOdyssey run. Hands the plan + full git diff to the external

Security community
Google Workspace — Security skill for Claude Code

Google Workspace

Google Workspace CLI operations: setup diagnostics, security audit, recipe discovery, and output analysis. Usa

Security community

Related Agents

ForensicAgent — Security agent for Claude Code

ForensicAgent

Forensic security analyst — PII detection, secret scanning, identity leak auditing across git history, staged

Security community
Tp Audit Scanner — Security agent for Claude Code

Tp Audit Scanner

Use this when the user asks for a security / quality audit, pre-release sweep, or "scan this for issues". Find

Security community
Gitter — Development agent for Claude Code

Gitter

The only agent that writes git — every other agent is read-only. Delegate each worktree setup, commit, merge,

Development community