Shadysmetools

QA Security — Security skill for Claude Code

Security community

Security review of the current diff and an allow-listed local/staging URL - secrets, dependencies, headers/cookies/CORS, OWASP checks - with findings refuted before filing and only the count shared.

How to install QA Security

Installs to ~/.claude/skills/shadysmetools-shipshape-qa-security/SKILL.md

Terminal

mkdir -p ~/.claude/skills/shadysmetools-shipshape-qa-security && curl -fsSL https://raw.githubusercontent.com/Shadysmetools/shipshape/HEAD/commands/qa-security.md -o ~/.claude/skills/shadysmetools-shipshape-qa-security/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What QA Security does

description: Security review of the current diff and an allow-listed local/staging URL - secrets, dependencies, headers/cookies/CORS, OWASP checks - with findings refuted before filing and only the count shared. argument-hint: "[base branch] [allow-listed url]"

Delegate to the `qa-security-reviewer` agent with: $ARGUMENTS. Then send every finding to `qa-refuter`. Share only "N security findings (H high), see the private report"; never paste details into chat channels or notifiers.

Alternatives in Security

Imcodes — The IM for agents 960 ★
Maestro Odyssey — Long-running iterative cycle — one entry, seven modes (debug improve planex review security defensive ui) 530 ★
Agent Memory Vault — Markdown-first shared memory vault for Claude Code and Codex with SQLite, Zvec, Git, closeout, and audit 314 ★