The Commit Security Scanner is a specialized Claude Code skill designed to integrate deep security analysis into your development workflow. By leveraging LLM reasoning and the STRIDE threat model (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege), it automatically scans pull requests, specific commits, or staged changes to identify critical risks like SQL injection, improper authorization, and hardcoded secrets. It uniquely ensures context-aware results by automatically generating a repository-specific threat model if one is missing, providing developers with actionable JSON reports and remediation advice directly within their CLI environment.
主な機能
01Automatic generation of repository threat models and security configs
02Data flow tracing from source to sink with mitigation checking
03Standardized security reports with CWE mappings and severity scores
04Comprehensive STRIDE-based vulnerability analysis
05Support for PRs, commit ranges, and staged changes
068 GitHub stars
