Security Audit

by staruhub

Security Audit is a Quality skill for Claude Code, published by staruhub in ClaudeSkills.

700 stars130 forkson staruhub/ClaudeSkillsAdded 2026/08/23+1% in starsRepository updated 2026/08/13

View source on GitHub Download repo ZIP

agent-skillsai-agentsclaudeclaude-codeclaude-skillsdeep-research

Install in seconds

Install Security Audit

Copy Security Audit into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/staruhub/ClaudeSkills/tree/main/skills/Geek-skills-security-audit ~/.claude/skills/Geek-skills-security-audit

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/staruhub/ClaudeSkills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/Geek-skills-security-audit/SKILL.md in staruhub/ClaudeSkills
Installs to: ~/.claude/skills/Geek-skills-security-audit
Collection: One of 20 skills cataloged from this repository
Category: Quality — 1354 skills

What Security Audit does

Security Audit checks code, dependencies, secrets, and server configuration for common security issues. Use it for vulnerability scanning, dependency review, and CI/CD or infrastructure security audits within authorized systems.

Security Audit is cataloged under Quality on DirSkills. Security Audit comes from a repository tagged agent-skills, ai-agents, claude, claude-code and claude-skills.

Documentation

README

Excerpt

Security Audit Skill

全面的安全审计工具，覆盖代码静态分析(SAST)、依赖检查(SCA)和服务器配置审计。

授权与边界（先确认再动手）

只审计用户拥有或明确获得授权的代码/服务器；对第三方系统的扫描请求一律拒绝并说明原因
本skill做审计与建议，不做主动攻击性测试（漏洞利用、爆破、DoS验证）
发现硬编码凭证时只报告位置与类型，不在输出中回显完整明文
除非用户明确要求，不直接修改业务代码；修复以建议形式给出

时效性规则（重要）

本文件不维护具体CVE清单。凡涉及"某版本是否有漏洞"的结论，必须现场查询：用 web search 查 [框架/库名] CVE advisory [当前年份]，或查官方 security advisory 页面。正文中出现的具体CVE（如 Log4Shell CVE-2021-44228）仅作为漏洞类别的历史案例，不代表当前威胁全貌。

工作流程

安全审计遵循以下步骤：

环境检测 → 识别项目类型和技术栈
依赖检查 → 扫描第三方库漏洞（优先级最高）
静态代码分析 → SAST扫描源代码漏洞
敏感信息检测 → 扫描硬编码的密钥和凭证
配置审计 → 检查安全相关配置
生成报告 → 汇总发现并提供修复建议

快速开始

依赖安装

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Security Audit

What else does staruhub publish alongside Security Audit?
Security Audit is one of 20 skills that DirSkills catalogs from staruhub/ClaudeSkills, the repository it ships in. Its siblings there include A-Share Analyst, AI Sales Champion and C Drive Cleaner. Each one is a separate skill with its own page in this directory, installs the same way Security Audit does, and is maintained by staruhub in that same repository. The rest of the collection is listed on the staruhub/ClaudeSkills page.
How does Security Audit compare to other Quality skills?
Security Audit ranks #1050 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Security Audit against them. Open each page to compare what they document and how they install.