thefilesareinthecomputer

My Security Review — Security skill for Claude Code

Security community

Run a personal agent-tooling security review - secrets, shell/hook command execution, untrusted input, plugin/MCP trust, destructive file ops, settings.json.

How to install My Security Review

Installs to ~/.claude/skills/thefilesareinthecomputer-dotagents-my-security-review/SKILL.md

Terminal
mkdir -p ~/.claude/skills/thefilesareinthecomputer-dotagents-my-security-review && curl -fsSL https://raw.githubusercontent.com/thefilesareinthecomputer/dotagents/HEAD/commands/my-security-review.md -o ~/.claude/skills/thefilesareinthecomputer-dotagents-my-security-review/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What My Security Review does

description: Run a personal agent-tooling security review - secrets, shell/hook command execution, untrusted input, plugin/MCP trust, destructive file ops, settings.json

Invoke the `my-security-review-checklist` skill.

Review the current changes (staged, or recent commits if nothing is staged), plus any files named in the request, for the security concerns specific to agent tooling:

  1. Secrets & dotfiles - scan the staged diff for secrets; check .gitignore coverage
  2. **Shell &

Alternatives in Security

  • Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
  • Imcodes — The IM for agents 960 ★
  • MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Audit Risk — Security skill for Claude Code

Audit Risk

Find new risk surfaces (dependencies, auth, payments, destructive data ops, outbound calls, secrets) since the

Security community
J Config Audit — Security skill for Claude Code

J Config Audit

Security audit of Claude, Codex, Gemini, and shared agent configuration for secrets, over-broad permissions, a

Security community
Security Actions — Security skill for Claude Code

Security Actions

GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP s

Security community
Agent Config Audit — Security skill for Claude Code

Agent Config Audit

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpi

Security community
Migration Audit — Security skill for Claude Code

Migration Audit

Safety review of pending Supabase / Postgres migrations: destructive ops, locking impact on large tables, miss

Security community
Branch Audit — Security skill for Claude Code

Branch Audit

Read-only audit of local branches, worktrees, and PR state. Classifies each as fully-merged / unique-work / st

Security community

Related Agents

My Security Reviewer — Security agent for Claude Code

My Security Reviewer

Fresh-context security reviewer for agent tooling - skills, subagents, commands, hooks, shell/sync scripts, do

Security community
AI Security — Security agent for Claude Code

AI Security

Security review for a change in a project with .ai/ — authentication, authorization, secrets, personal and pay

Security community
Proteus Security Verifier — Security agent for Claude Code

Proteus Security Verifier

Proteus second verifier for tickets touching auth, input parsing, secrets, file or network I/O, money, persona

Security community