🛡️
QualityShell

Security Auditor

by alirezarezvani

Security Auditor is a Quality skill for Claude Code, published by alirezarezvani in claude-code-tresor.

766 stars167 forkson alirezarezvani/claude-code-tresorAdded 2026/08/23Repository updated 2026/07/03
agent-development-kitagentic-aiagentic-codingagentic-workflowagentsanthropic-claudeclaude-code
Install in seconds
Install Security Auditor
Copy Security Auditor into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/alirezarezvani/claude-code-tresor/tree/main/skills/security/security-auditor ~/.claude/skills/security-auditor

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/alirezarezvani/claude-code-tresor.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
skills/security/security-auditor/SKILL.md in alirezarezvani/claude-code-tresor
Installs to
~/.claude/skills/security-auditor
Collection
One of 8 skills cataloged from this repository
Category
Quality1354 skills

What Security Auditor does

Security Auditor scans code and dependencies for common vulnerabilities like SQL injection, XSS, auth issues, and exposed secrets. Use it when reviewing changes, before deployments, or after security-related edits.

Security Auditor is cataloged under Quality on DirSkills. Security Auditor comes from a repository tagged agent-development-kit, agentic-ai, agentic-coding, agentic-workflow and agents.

Documentation

README

Security Auditor Skill

Automatic security vulnerability detection.

When I Activate

  • ✅ Code files modified (especially auth, API, database)
  • ✅ User mentions security or vulnerabilities
  • ✅ Before deployments or commits
  • ✅ Dependency changes
  • ✅ Configuration file changes

What I Scan For

OWASP Top 10 Patterns

1. SQL Injection

// CRITICAL: SQL injection
const query = `SELECT * FROM users WHERE id = ${userId}`;

// SECURE: Parameterized query
const query = 'SELECT * FROM users WHERE id = ?';
db.query(query, [userId]);

This is the opening of the README. Read the full README on GitHub.

Commands Security Auditor provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

  • /review

Frequently asked about Security Auditor

  • What else does alirezarezvani publish alongside Security Auditor?

    Security Auditor is one of 8 skills that DirSkills catalogs from alirezarezvani/claude-code-tresor, the repository it ships in. Its siblings there include API Documenter, Code Reviewer and Dependency Auditor. Each one is a separate skill with its own page in this directory, installs the same way Security Auditor does, and is maintained by alirezarezvani in that same repository. The rest of the collection is listed on the alirezarezvani/claude-code-tresor page.

  • How does Security Auditor compare to other Quality skills?

    Security Auditor ranks #1002 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Security Auditor against them. Open each page to compare what they document and how they install.