claude-security-skills
claude-security-skills 收录了来自 GlamgarOnDiscord 的 4 个 skills，并提供仓库级职业覆盖和站内 skill 详情页。
这个仓库中的 skills
Deep static application security audit (SAST) — OWASP 2025, API Security 2023, LLM Top 10, with full data flow tracing and actionable remediation. Use before deployments, during code reviews, or for security assessments on any project.
Infrastructure & deployment security audit — Docker, Nginx, databases, CI/CD, cloud, TLS, secrets management. Framework-agnostic, adapts to any stack. Use before production deployments.
Cross-platform active penetration testing with codebase intelligence. Auto-detects OS (Windows+WSL, Linux native, macOS, Docker) and adapts command execution. Combines source code analysis with real security tools for targeted scanning and exploitation testing. Requires written authorization and elevated access credentials.
Aggregate findings from all security skills (/security-code-review, /security-infra-review, /security-pentest) into a professional penetration testing report with executive summary, OWASP matrix, vulnerability chains, deduplication strategy, and actionable remediation roadmap with effort estimates.