Can this skill generate visual diagrams?

Yes, it can produce Mermaid.js diagrams that visualize the flow of data through different layers of your application, from the UI to the database.

How does the Data Flow skill identify security risks?

It analyzes the path variables take from input sources to output sinks, checking for validation steps, encryption methods, and trust boundary crossings along the way.

Is it effective for compliance audits?

It is an excellent tool for compliance, helping developers identify where PII is stored, how it is transformed, and if it is being logged or transmitted insecurely.

Does it support different levels of analysis?

Absolutely. You can use the --depth flag to choose between a quick overview of entry points or a deep expert analysis including DREAD scoring and threat categorization.

Data Flow Security Mapper

Name: Data Flow Security Mapper
Author: florianbuetow

byflorianbuetow

•

セキュリティとテスト

Traces application data from input sources to storage sinks to identify security vulnerabilities and trust boundary violations.

The Data Flow Mapping skill enables Claude to perform comprehensive security analysis by tracing how sensitive information moves through your codebase. It automatically identifies data sources like HTTP requests, transformation steps such as encryption or validation, and final sinks like databases or logs. By mapping these flows, the skill uncovers critical security weaknesses such as unvalidated trust boundary crossings, cleartext storage of sensitive data, and potential PII leaks, providing structured reports and Mermaid diagrams for clear architectural visualization.

主な機能

01Automated tracing of data from entry points to persistent storage or external APIs.

02Identification of trust boundaries and encryption/decryption checkpoints.

036 GitHub stars

04Generation of visual Mermaid data flow diagrams for architectural reviews.

05Configurable analysis depth ranging from high-level summaries to deep taint analysis.

06Detection of security weaknesses like missing validation or sensitive data in logs.

ユースケース

01Mapping complex data transformation pipelines to identify potential injection points or logic flaws.

02Conducting security audits to ensure PII and credentials are encrypted at rest and in transit.

03Documenting system architecture and data movement for compliance requirements like GDPR or SOC2.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code data-flows

For use in Claude.ai and ChatGPT

Download Skill