Code Vulnerability Audit

Code Vulnerability Audit is a Quality skill for Claude Code, published by zebbern in claude-code-guide.

4.6K stars459 forkson zebbern/claude-code-guideAdded 2026/08/16Repository updated 2026/08/15

aiai-agentai-agent-toolsanthropic-claudeclaudeclaude-aiclaude-apiclaude-codeclaude-code-communicationclaude-code-guideclaude-code-skillsclaude-commandsclaude-desktopclaude-mcpclaude-sonnetcodemcpmcp-agentsmcp-toolsvscode-extension

Install in seconds

Install Code Vulnerability Audit

Copy Code Vulnerability Audit into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/zebbern/claude-code-guide/tree/main/skills/code-vuln-audit ~/.claude/skills/code-vuln-audit

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/zebbern/claude-code-guide.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/code-vuln-audit/SKILL.md in zebbern/claude-code-guide
Installs to: ~/.claude/skills/code-vuln-audit
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1354 skills

What Code Vulnerability Audit does

Code Vulnerability Audit scans code for dependency vulnerabilities, hardcoded secrets, and OWASP security anti-patterns such as SQL injection and XSS. Use it when asked to run security scans, vulnerability detection, secret leak checks, or code security audits.

Code Vulnerability Audit is cataloged under Quality on DirSkills. Code Vulnerability Audit comes from a repository tagged ai, ai-agent, ai-agent-tools, anthropic-claude and claude.

Documentation

README

Excerpt

code-vuln-audit

A code security scanning tool with three core scanning capabilities:

Dependency Vulnerability Scanning — Automatically detects known vulnerabilities in npm / pip dependencies
Secret Leak Detection — Discovers hardcoded secrets, tokens, and passwords via regex matching + Shannon entropy analysis
OWASP Pattern Detection — Identifies common security anti-patterns such as SQL injection, XSS, command injection, and insecure deserialization

Quick Start

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Code Vulnerability Audit

What else does zebbern publish alongside Code Vulnerability Audit?
Code Vulnerability Audit is one of 25 skills that DirSkills catalogs from zebbern/claude-code-guide, the repository it ships in. Its siblings there include API Fuzzing for Bug Bounty, API Shape Explorer and AWS Penetration Testing. Each one is a separate skill with its own page in this directory, installs the same way Code Vulnerability Audit does, and is maintained by zebbern in that same repository. The rest of the collection is listed on the zebbern/claude-code-guide page.
How does Code Vulnerability Audit compare to other Quality skills?
Code Vulnerability Audit ranks #320 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Code Vulnerability Audit against them. Open each page to compare what they document and how they install.