solanabr

Audit Infra — Security skill for Claude Code

Security community

Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE.

How to install Audit Infra

Installs to ~/.claude/commands/solanabr-solana-ai-kit-audit-infra.md

Terminal
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/solanabr/solana-ai-kit/HEAD/.claude/commands/audit-infra.md -o ~/.claude/commands/solanabr-solana-ai-kit-audit-infra.md

Restart Claude Code, or start a new session, for it to be picked up.

What Audit Infra does

description: "Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE. Complements /audit-solana (program-level)"

You are conducting an infrastructure-first security audit. `/audit-solana` covers the program; this command covers everything **around** it — secrets, dependencies, pipelines, integrations, and the AI/skill surface. Y

Alternatives in Security

  • Claude Bootstrap — Opinionated project initialization with security-first guardrails, spec-driven atomic todos, LLM testing patte 536 ★
  • Query Token Audit — Audit token security to detect scams, honeypots, and malicious contracts across BSC, Base, Solana, and Ethereu 483 ★
  • Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Review Code Security — Security skill for Claude Code

Review Code Security

Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets,

Security community
Skill Threat Modeling — Security skill for Claude Code

Skill Threat Modeling

Code-First Deep Risk Analysis Skill for Claude Code - 8-Phase Workflow with Security design review, STRIDE Thr

Security community
Security Actions — Security skill for Claude Code

Security Actions

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP s

Security community
Skill Lint — Security skill for Claude Code

Skill Lint

Security scanner for Claude Code / agent skills. Catches prompt injection, obfuscation, credential exfiltratio

Security community
Security Sweep — Security skill for Claude Code

Security Sweep

Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan

Security community
Security Audit — Security skill for Claude Code

Security Audit

Audit de securite complet d'une web app (OWASP Top 10, CWE/CVE, headers, auth, paywall, infra). Genere un rapp

Security community

Related Agents

Critic Security — Security agent for Claude Code

Critic Security

Review code for OWASP-style security issues (injection, authn/authz, secrets, supply chain, LLM-specific) in p

Security community
Harness Security Reviewer — Security agent for Claude Code

Harness Security Reviewer

Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input

Security community
Security Officer — Security agent for Claude Code

Security Officer

OWASP + STRIDE pass over a change or surface. Fails closed — unresolved risk blocks ship. Spawn for anything t

Security community