Identifies security vulnerabilities, logical bugs, and code quality issues within local Git branch changes.
Bug Finder & Security Auditor is a specialized skill for Claude Code designed to perform deep-dive reviews of local code changes before they are merged. It utilizes a systematic five-phase approach—covering input gathering, attack surface mapping, security checklists, verification, and a final audit—to uncover critical risks like injection vulnerabilities, authentication flaws, and business logic errors. By focusing on security and functionality rather than mere style, it provides developers with actionable insights and concrete fix suggestions to ensure high-quality, secure production code during the development lifecycle.
Características Principales
01Severity-based issue prioritization (Critical to Low)
02Systematic 5-phase security audit workflow
030 GitHub stars
04Comprehensive checklist for XSS, SQLi, CSRF, and IDOR
05Automated mapping of user inputs and attack surfaces
06Detailed reporting with evidence and concrete fix suggestions
Casos de Uso
01Auditing local branches for security vulnerabilities before PR submission
02Verifying authentication and authorization implementation in new features
03Conducting deep-dive bug hunts on complex logic changes
