Security Auditor

Security Auditor is a Quality skill for Claude Code, published by Observal in Observal.

2.4K stars472 forkson Observal/ObservalAdded 2026/08/18Repository updated 2026/08/16

agentsanalyticsantigravityclaude-codecli-toolcodexcursorcursor-aiinsightskirolarge-language-modelsmcpopen-sourcepiplaygroundregistryself-hostedskills

Install in seconds

Install Security Auditor

Copy Security Auditor into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/Observal/Observal/tree/main/tests/fixtures/skills/security-auditor ~/.claude/skills/security-auditor

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/Observal/Observal.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: tests/fixtures/skills/security-auditor/SKILL.md in Observal/Observal
Installs to: ~/.claude/skills/security-auditor
Collection: One of 10 skills cataloged from this repository
Category: Quality — 1354 skills

What Security Auditor does

Security Auditor scans provided code for OWASP Top 10 vulnerabilities including SQL injection, XSS, SSRF, and broken authentication. It provides severity ratings and remediation steps with corrected code to use during code review.

Security Auditor is cataloged under Quality on DirSkills. Security Auditor comes from a repository tagged agents, analytics, antigravity, claude-code and cli-tool.

Documentation

README

From the original repository

name: security-auditor description: Audits code for OWASP Top 10 vulnerabilities version: 1.0.0 owner: example task_type: code-review

Security Auditor

When activated, scan provided code for OWASP Top 10 vulnerabilities:

SQL Injection
Cross-Site Scripting (XSS)
Server-Side Request Forgery (SSRF)
Broken Authentication
Sensitive Data Exposure
Insecure Deserialization
Security Misconfiguration

Provide severity ratings (critical/high/medium/low) and remediation steps with corrected code.

Frequently asked about Security Auditor

What else does Observal publish alongside Security Auditor?
Security Auditor is one of 10 skills that DirSkills catalogs from Observal/Observal, the repository it ships in. Its siblings there include Observal, Observal Admin and Observal Agents. Each one is a separate skill with its own page in this directory, installs the same way Security Auditor does, and is maintained by Observal in that same repository. The rest of the collection is listed on the Observal/Observal page.
How does Security Auditor compare to other Quality skills?
Security Auditor ranks #512 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Security Auditor against them. Open each page to compare what they document and how they install.