kalshamsi/claude-security-skills

pci-dss-audit

Use when auditing code for PCI-DSS v4.0 compliance, reviewing cardholder data handling, checking credit-card storage and transmission, hunting PAN logging, or answering "is this code PCI-compliant?".

لغة النص الأصلي: الإنجليزية

docker-scout-scanner

Use when scanning Docker images for CVEs, auditing Dockerfiles for misconfigurations, reviewing base image choices, generating container SBOMs, hardening docker-compose configurations, or any container/OCI security concern.

لغة النص الأصلي: الإنجليزية

bandit-sast

Use when scanning Python code for security vulnerabilities, running Bandit, performing Python SAST, auditing Python security bugs, or reviewing Python source for injection, weak crypto, or insecure deserialization.

لغة النص الأصلي: الإنجليزية

mobile-security

Use when auditing an Android or iOS application for security issues, reviewing React Native or Flutter code, checking mobile authentication or insecure data storage, or covering the OWASP Mobile Top 10:2024.

لغة النص الأصلي: الإنجليزية

security-headers-audit

Use when reviewing HTTP security headers, checking a Content-Security-Policy, auditing CORS or HSTS configuration, evaluating X-Frame-Options or Permissions-Policy, inspecting header middleware, or hardening a web application's response headers.

لغة النص الأصلي: الإنجليزية

security-test-generator

Use when writing security tests for a web application, building a vulnerability regression suite, creating pentest-style automated tests, generating runnable injection/XSS/auth test code, or adding security coverage to an existing test suite.

لغة النص الأصلي: الإنجليزية

api-security-tester

Use when auditing REST or GraphQL API endpoints, checking API authentication and authorization, hunting BOLA or broken access control, reviewing rate limiting, or covering the OWASP API Security Top 10.

لغة النص الأصلي: الإنجليزية

socket-sca

Use when scanning project dependencies for supply-chain risk, running Socket SCA on npm/pip/pypi packages, hunting typosquats or malicious packages, or auditing third-party dependency health before a release.

لغة النص الأصلي: الإنجليزية

crypto-audit

Use when reviewing code for weak encryption, hardcoded cryptographic keys, insecure TLS/SSL configuration, broken hashing, bad randomness, or any cryptographic implementation concern — regardless of language.

لغة النص الأصلي: الإنجليزية

devsecops-pipeline

Use when setting up security scanning in CI/CD, adding SAST/SCA/secrets/container scanning to a GitHub Actions workflow, wiring SARIF uploads, or building a DevSecOps pipeline for a new or existing repo.

لغة النص الأصلي: الإنجليزية

your-skill-name

Use when [trigger conditions]. Performs [what it does] for [target language/framework].

لغة النص الأصلي: الإنجليزية