Menu
Full security audit: detect local vulnerabilities, cross-file taint flows, CVEs in dependencies, and polyglot sink patterns. Complete security scan pipeline.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
Analyze code structure: parse functions, classes, imports, and complexity metrics. Use to understand a file or project without reading the source code directly.
Extract a specific function, class, or method from a file using Code Scalpel. Use when you need to show a symbol without reading the entire file—saves 95% of context.
Map project architecture: discover modules, build call graphs, visualize structure, trace critical paths. Complete architecture overview with dependency flows.
Verify code compliance with policies and standards: HIPAA, SOC2, PCI-DSS, custom style guides. Validate policy file integrity with cryptographic verification.
Safe refactoring workflow: find all usages, trace dependencies, simulate changes, generate baseline tests, then apply with backup. Behavior-preserving refactor.
Install and verify the Code Scalpel MCP server. Checks if codescalpel is already installed in Claude Code, runs `claude mcp add` if needed, and confirms connection by fetching capabilities.
| name | cs-security |
| description | Full security audit: detect local vulnerabilities, cross-file taint flows, CVEs in dependencies, and polyglot sink patterns. Complete security scan pipeline. |
| allowed-tools | ["mcp__codescalpel__security_scan","mcp__codescalpel__cross_file_security_scan","mcp__codescalpel__unified_sink_detect","mcp__codescalpel__scan_dependencies"] |
| preamble-tier | 1 |
Run a complete security analysis: find SQL injection, XSS, command injection, path traversal, tainted data flows, and vulnerable dependencies.
/cs-security
/cs-security src/api/
Local analysis — Detect SQL injection, XSS, command injection, path traversal within files
Cross-file analysis — Find vulnerabilities that span module boundaries
Dependency scan — Check for known CVEs in your libraries
Polyglot detection — Find sinks across Python, JavaScript, TypeScript, Java
/cs-extract to see the vulnerable code/cs-refactor to fix it safely/cs-security to confirm the fixRun this on your whole project regularly:
/cs-security .
See CLAUDE.md for the complete security workflow.