vchelaru

Security Checker — Security skill for Claude Code

Security community

XnaFiddle Security Model & SecurityChecker.

How to install Security Checker

Installs to ~/.claude/skills/vchelaru-xnafiddle-security-checker/SKILL.md

Terminal
mkdir -p ~/.claude/skills/vchelaru-xnafiddle-security-checker && curl -fsSL https://raw.githubusercontent.com/vchelaru/XnaFiddle/HEAD/.claude/skills/security-checker.md -o ~/.claude/skills/vchelaru-xnafiddle-security-checker/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Security Checker does

XnaFiddle Security Model & SecurityChecker

Use this skill when asked about security concerns, the SecurityChecker, what APIs are blocked, why something is forbidden, or how to extend the block list.

Threat Model

XnaFiddle compiles and executes **user-supplied C# code** entirely in the browser via Roslyn + `Assembly.Load`. The code runs inside the same Blazor WASM process as the host app — there is no sandbox boundary. This means:

  • Malicious code can call any .NET API that is loaded int

Alternatives in Security

  • FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
  • Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
  • Google Workspace Model Armor — Filter user-generated content for safety 21.6k ★

Full documentation available on GitHub

View Source Repository