Security Checker — Security skill for Claude Code
XnaFiddle Security Model & SecurityChecker.
How to install Security Checker
Installs to ~/.claude/skills/vchelaru-xnafiddle-security-checker/SKILL.md
mkdir -p ~/.claude/skills/vchelaru-xnafiddle-security-checker && curl -fsSL https://raw.githubusercontent.com/vchelaru/XnaFiddle/HEAD/.claude/skills/security-checker.md -o ~/.claude/skills/vchelaru-xnafiddle-security-checker/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Checker does
XnaFiddle Security Model & SecurityChecker
Use this skill when asked about security concerns, the SecurityChecker, what APIs are blocked, why something is forbidden, or how to extend the block list.
Threat Model
XnaFiddle compiles and executes **user-supplied C# code** entirely in the browser via Roslyn + `Assembly.Load`. The code runs inside the same Blazor WASM process as the host app — there is no sandbox boundary. This means:
- Malicious code can call any .NET API that is loaded int
Alternatives in Security
- FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
- Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
- Google Workspace Model Armor — Filter user-generated content for safety 21.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Skill Checker
🔍 Claude Code skill evaluator — check any skill's functionality, security, dependencies, API needs, and token
Security Threat Model
Generate repo-specific threat models identifying trust boundaries
Pal
Multi-model AI integration — chat, debugging, code review, planning, security audit
DeepSafe Scan — Preflight Security Scanner For AI Coding Agents
Full-featured preflight security scanner across 5 dimensions: Posture (config), Skill (skills & MCP), Memory (
Cross Review
Use when: reviewing high-stakes changes such as security-sensitive code, public API changes, or data migration
Redstamp
own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prom
Related Agents
Fact Reviewer
Independent fact-checker for completed analysis pipelines. Use when an analysis (model + structured output + f
Evidence Checker
Use to audit any document, plan, or model for unsourced claims. Reads a file and flags every claim that is not
Integration Checker
Runs post-merge integration tests and security scans. Ensures all merged code works together before holistic r