claudeskills.page

Collection · 12 skills

Security Review Kit

Run a structured security review with Claude: model the threats, check the code against OWASP categories, verify authentication and token handling, scan for leaked secrets and vulnerable dependencies, and harden headers and containers. Defensive and authorized use only.

Best for Developers preparing for a security review, audit or launch.

What's inside

Listed in the order we suggest adopting them. You don't call them by name: each skill loads on its own when a request matches it.

  1. Threat Modeling Find design flaws before they become incidents Security threat-modeling 189 lines
  2. OWASP Top 10 Review Findings with file:line evidence, not vague advice Security owasp-review 174 lines
  3. API Security Prove every endpoint denies the wrong user Security api-security 176 lines
  4. Auth and Sessions Login, sessions and recovery an attacker can't shortcut Security auth-sessions 176 lines
  5. OAuth 2.1 and OIDC PKCE, state and nonce, checked every single time Security oauth-oidc 168 lines
  6. Input Validation Safe sinks first, schemas second, payload tests always Security input-validation 202 lines
  7. Secrets Management Rotate first, rewrite history second Security secrets-management 186 lines
  8. Supply Chain Audit Triage every CVE instead of just counting them Security supply-chain-audit 182 lines
  9. Security Headers Strict CSP shipped without breaking production Security security-headers 190 lines
  10. Container Security Minimal images, non-root pods, scanned on every build Security container-security 209 lines
  11. MFA Implementation Second factors with no back door left open Security mfa-implementation 279 lines
  12. SAML SSO Enterprise single sign-on without the XML bypasses Security saml-sso 268 lines

Keep exploring

Other collections

All collections →
esc