Security Analysis

Security Analysis is a Quality skill for Claude Code, published by telagod in code-abyss.

239 stars32 forkson telagod/code-abyssAdded 2026/09/03Repository updated 2026/07/19

agent-skillsai-agentai-assistantai-personalityblue-teamcharacter-cardclaude-codeclicodexcodex-cliconfigurationdeveloper-toolsdevopsgemini-clipersonaprompt-engineeringred-teamsecurityskills

Install in seconds

Install Security Analysis

Copy Security Analysis into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/telagod/code-abyss/tree/main/skills/analyzing-security ~/.claude/skills/analyzing-security

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/telagod/code-abyss.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/analyzing-security/SKILL.md in telagod/code-abyss
Installs to: ~/.claude/skills/analyzing-security
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1478 skills

What Security Analysis does

Security Analysis scans code for vulnerabilities, dangerous patterns, and sensitive data leaks. Use it when auditing code, checking OWASP issues, or reviewing security-related changes and refactors.

Security Analysis is cataloged under Quality on DirSkills. Security Analysis comes from a repository tagged agent-skills, ai-agent, ai-assistant, ai-personality and blue-team.

Documentation

README

Excerpt

安全校验关卡

判断先于执行：决定「是否做 / 选什么 / 如何取舍」（栈、方案、架构、权衡）前，先读领域判断内核 skills/_kernel/security/SKILL.md——它管 judgment，本秘典管 execution；冲突时以内核判断为准。

自动化扫描捕捉模式，但严重度判定与处置取决于上下文——sink、信任边界、补偿控制。

何时使用

场景	必跑	理由
新模块落地	✅	引入新攻击面
安全相关变更	✅	直接触及威胁面
重构完成	✅	防止重构引入退化
提交前（含敏感数据/外部输入处理）	✅	最后一道闸
攻防任务交付	✅	验收前自检
仅文档/样式改动	❌	无攻击面变化

何时不使用

依赖更新（用 SCA 工具如 npm audit、pip-audit，不是模式扫描）
运行时漏洞（用 DAST，不是静态扫描）
配置审计（用 CIS Benchmark 或专用工具）

解读输出

严重度（critical / high / medium / low）+ 类别（注入 / 敏感信息 / XSS / 反序列化 / 路径遍历 / SSRF / 弱加密 / 不安全随机 / 调试残留）。

必修

Critical（SQL 注入、命令注入、硬编码密钥、AWS Key、私钥）→ 阻断交付，无例外。
High（XSS、反序列化、路径遍历、SSRF）→ 修复或显式接受风险（需 DESIGN.md 留痕 + 补偿控制）。

上下文降级条件

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Security Analysis

What else does telagod publish alongside Security Analysis?
Security Analysis is one of 25 skills that DirSkills catalogs from telagod/code-abyss, the repository it ships in. Its siblings there include Adversarial Review Orchestration, Analyzing Changes and Analyzing Spreadsheets. Each one is a separate skill with its own page in this directory, installs the same way Security Analysis does, and is maintained by telagod in that same repository. The rest of the collection is listed on the telagod/code-abyss page.
How does Security Analysis compare to other Quality skills?
Security Analysis ranks #1350 by stars among the 1478 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Security Analysis against them. Open each page to compare what they document and how they install.