القائمة
Full security audit: detect local vulnerabilities, cross-file taint flows, CVEs in dependencies, and polyglot sink patterns. Complete security scan pipeline.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Analyze code structure: parse functions, classes, imports, and complexity metrics. Use to understand a file or project without reading the source code directly.
Extract a specific function, class, or method from a file using Code Scalpel. Use when you need to show a symbol without reading the entire file—saves 95% of context.
Map project architecture: discover modules, build call graphs, visualize structure, trace critical paths. Complete architecture overview with dependency flows.
Verify code compliance with policies and standards: HIPAA, SOC2, PCI-DSS, custom style guides. Validate policy file integrity with cryptographic verification.
Safe refactoring workflow: find all usages, trace dependencies, simulate changes, generate baseline tests, then apply with backup. Behavior-preserving refactor.
Install and verify the Code Scalpel MCP server. Checks if codescalpel is already installed in Claude Code, runs `claude mcp add` if needed, and confirms connection by fetching capabilities.
| name | cs-security |
| description | Full security audit: detect local vulnerabilities, cross-file taint flows, CVEs in dependencies, and polyglot sink patterns. Complete security scan pipeline. |
| allowed-tools | ["mcp__codescalpel__security_scan","mcp__codescalpel__cross_file_security_scan","mcp__codescalpel__unified_sink_detect","mcp__codescalpel__scan_dependencies"] |
| preamble-tier | 1 |
Run a complete security analysis: find SQL injection, XSS, command injection, path traversal, tainted data flows, and vulnerable dependencies.
/cs-security
/cs-security src/api/
Local analysis — Detect SQL injection, XSS, command injection, path traversal within files
Cross-file analysis — Find vulnerabilities that span module boundaries
Dependency scan — Check for known CVEs in your libraries
Polyglot detection — Find sinks across Python, JavaScript, TypeScript, Java
/cs-extract to see the vulnerable code/cs-refactor to fix it safely/cs-security to confirm the fixRun this on your whole project regularly:
/cs-security .
See CLAUDE.md for the complete security workflow.