🔒
QualityTypeScript

Security Audit

by davepoon

Security Audit is a Quality skill for Claude Code, published by davepoon in buildwithclaude.

3.3K stars459 forkson davepoon/buildwithclaudeAdded 2026/08/17Repository updated 2026/08/16
claudeclaude-codeclaude-code-commandsclaude-skillscli-toolcommandsmcpmcp-servermcp-toolsopenclawplugin-marketplacesubagents
Install in seconds
Install Security Audit
Copy Security Audit into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/davepoon/buildwithclaude/tree/main/plugins/agent-triforce/skills/security-audit ~/.claude/skills/security-audit

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/davepoon/buildwithclaude.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
plugins/agent-triforce/skills/security-audit/SKILL.md in davepoon/buildwithclaude
Installs to
~/.claude/skills/security-audit
Collection
One of 25 skills cataloged from this repository
Category
Quality1354 skills

What Security Audit does

Security Audit performs a deep security review covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning. Use it before releases or after security-sensitive changes to produce a findings report.

Security Audit is cataloged under Quality on DirSkills. Security Audit comes from a repository tagged claude, claude-code, claude-code-commands, claude-skills and cli-tool.

Documentation

README

Security Audit

Performs a deep security audit using the Centinela (QA) agent.

When to Use This Skill

  • Before a release to verify security posture
  • After significant code changes that touch authentication, authorization, or data handling
  • Periodic security review of the codebase
  • When adding new dependencies or external integrations

What This Skill Does

This is the opening of the README. Read the full README on GitHub.

Commands Security Audit provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

  • /security-audit

Frequently asked about Security Audit

  • What else does davepoon publish alongside Security Audit?

    Security Audit is one of 25 skills that DirSkills catalogs from davepoon/buildwithclaude, the repository it ships in. Its siblings there include ActiveCampaign Automation, Agent Analytics and Agent Memory Discipline. Each one is a separate skill with its own page in this directory, installs the same way Security Audit does, and is maintained by davepoon in that same repository. The rest of the collection is listed on the davepoon/buildwithclaude page.

  • How does Security Audit compare to other Quality skills?

    Security Audit ranks #396 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Security Audit against them. Open each page to compare what they document and how they install.

More from davepoon/buildwithclaude

Security Audit is one of 25 skills cataloged on DirSkills from davepoon/buildwithclaude.

See all 25 skills
📧
2w ago

ActiveCampaign Automation

ActiveCampaign Automation manages contacts, tags, list subscriptions, automation enrollment, and tasks in ActiveCampaign via Rube MCP. Use it to automate CRM and marketing operations when working in an agent environment.
Automation
3.3K459
📊
2w ago

Agent Analytics

Agent Analytics adds analytics tracking, A/B experiments, funnels, and retention analysis to projects via CLI. Use it when an AI agent needs to track traffic, conversions, and growth without dashboard-only workflows.
Data
3.3K459
🧠
2w ago

Agent Memory Discipline

Agent Memory Discipline teaches when to recall from long-term memory before acting and when to save durable decisions, corrections and failures afterwards. Use it when a memory tool is connected but underused or when setting up persistent memory for a project.
AI Engineering
3.3K459
📊
2w ago

Airtable Automation

Airtable Automation automates Airtable tasks through Rube MCP (Composio), including records, bases, tables, fields, and views. Use it to create, read, update, delete records, manage schema, and handle comments on Airtable bases.
Automation
3.3K459
📊
2w ago

Amplitude Automation

Amplitude Automation automates Amplitude product analytics tasks such as sending events, retrieving user activity, managing cohorts, and identifying users via Rube MCP and Composio. Use it when you need to interact with Amplitude programmatically.
Automation
3.3K459
🎨
2w ago

Anti UI Slop

Anti UI Slop stops coding agents from shipping generic interfaces by using UIZZE's catalog of 800,000+ real web and iOS screens to define product-specific designs, required states, and a hard finish gate. Use it during web or iOS UI design, implementation, redesign, critique, or pre-ship review.
Frontend
3.3K459