Security Best Practices — Security skill for Claude Code
Review code for language-specific security vulnerabilities.
How to install Security Best Practices
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open openai/skills and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Security Best Practices does
Review code for language-specific security vulnerabilities.
One of 28 entries listed from openai/skills. The repository README
describes the whole collection, not this skill — read it on GitHub.
Alternatives in Security
- Deepsec — Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents 7.8k ★
- Claude Code Security Review — An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities 3.9k ★
- Fix Secdeps — Audit and fix Dependabot security vulnerabilities across the monorepo 390 ★
Related Skills
Owasp Security
OWASP Top 10:2025, ASVS 5.0, and Agentic AI security (2026) with code review checklists, secure patterns, and
AuraKit
npx @smorky85/aurakit Fullstack development skill with 37 modes (BUILD/FIX/CLEAN/DEPLOY/REVIEW + 32 extended),
J Diff Review
Deep multi-perspective diff review — code quality, security, testing gaps, documentation drift, observability
Obey
Rule enforcement plugin. Save rules with natural language, enforce with 17 lifecycle hooks. Three scopes (glob
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Related Agents
Code Review
Specialized AI agent for comprehensive code analysis, security review, and quality assessment. Expert in multi
Aspm Correlator
Application Security Posture Management persona. Correlates findings from SAST, DAST, and SCA tools, deduplica
Category Auditor
You are a security category auditor. You audit ONE specific domain/category group of a codebase, looking for r