vchelaru

Security Checker — Security skill for Claude Code

Security community

XnaFiddle Security Model & SecurityChecker.

How to install Security Checker

Installs to ~/.claude/skills/vchelaru-xnafiddle-security-checker/SKILL.md

Terminal
mkdir -p ~/.claude/skills/vchelaru-xnafiddle-security-checker && curl -fsSL https://raw.githubusercontent.com/vchelaru/XnaFiddle/HEAD/.claude/skills/security-checker.md -o ~/.claude/skills/vchelaru-xnafiddle-security-checker/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Security Checker does

XnaFiddle Security Model & SecurityChecker

Use this skill when asked about security concerns, the SecurityChecker, what APIs are blocked, why something is forbidden, or how to extend the block list.

Threat Model

XnaFiddle compiles and executes **user-supplied C# code** entirely in the browser via Roslyn + `Assembly.Load`. The code runs inside the same Blazor WASM process as the host app — there is no sandbox boundary. This means:

  • Malicious code can call any .NET API that is loaded int

Alternatives in Security

  • Google Workspace Model Armor — Filter user-generated content for safety 21.6k ★
  • Security Threat Model — Generate repo-specific threat models identifying trust boundaries 14.6k ★
  • Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★

Full documentation available on GitHub

View Source Repository

Related Skills

Skill Checker — Security skill for Claude Code

Skill Checker

🔍 Claude Code skill evaluator — check any skill's functionality, security, dependencies, API needs, and token

Security community
DeepSafe Scan — Preflight Security Scanner For AI Coding Agents — Security skill for Claude Code

DeepSafe Scan — Preflight Security Scanner For AI Coding Agents

Full-featured preflight security scanner across 5 dimensions: Posture (config), Skill (skills & MCP), Memory (

Security community
Cross Review — Security skill for Claude Code

Cross Review

Use when: reviewing high-stakes changes such as security-sensitive code, public API changes, or data migration

Security community
Fable Skills — Security skill for Claude Code

Fable Skills

Five skills Fable wrote before it left: the security sweep, the setup, the build planner, the honest advisor,

Security community
IntentProbe — Security skill for Claude Code

IntentProbe

Activation-probe security scanner for AI agent tooling. Reads a model's internal activations to detect poisone

Security community
Redstamp — Security skill for Claude Code

Redstamp

own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prom

Security community

Related Agents

Appsec Compliance Checker — Security agent for Claude Code

Appsec Compliance Checker

Use proactively to map security findings from a threat model or code review to specific controls in OWASP ASVS

Security community
Fact Reviewer — Security agent for Claude Code

Fact Reviewer

Independent fact-checker for completed analysis pipelines. Use when an analysis (model + structured output + f

Security community
Evidence Checker — Security agent for Claude Code

Evidence Checker

Use to audit any document, plan, or model for unsourced claims. Reads a file and flags every claim that is not

Security community