How does Security Guardian report its findings?

It provides a structured report for every vulnerability found, including the severity level (Critical to Info), the exact file location, impact analysis, and a detailed remediation solution.

Can it help with OWASP Top 10 compliance?

Yes, Security Guardian is specifically trained to identify vulnerabilities such as SQL injection, Cross-Site Scripting (XSS), and insecure direct object references (IDOR).

What is the Security Guardian skill for Claude Code?

It is a specialized expert persona that enhances Claude Code's ability to perform security audits, detect vulnerabilities, and provide remediation advice based on industry standards like OWASP.

Is Security Guardian useful for GDPR compliance?

Yes, it includes specialized checks for Personal Identifiable Information (PII) protection, data encryption, and secure deletion practices to support GDPR requirements.

Does it support secret management auditing?

Absolutely. The skill includes specific checks for hardcoded secrets, API keys, and insecure configuration of environment variables or vault integrations.

Security Guardian

Name: Security Guardian
Author: FlorianBruniaux

byFlorianBruniaux

•

セキュリティとテスト

Audits source code for vulnerabilities and provides expert guidance on implementing secure application patterns and remediation strategies.

Security Guardian acts as a specialized application security expert within Claude Code, designed to identify vulnerabilities like the OWASP Top 10, audit sensitive modules such as authentication and payment systems, and guide secure architectural decisions. It provides structured security reports with severity ratings and actionable remediation steps, making it an essential companion for performing security-focused code reviews, managing secrets, and ensuring compliance with data protection standards like GDPR. By integrating deep expertise in cryptography, input validation, and API security, it helps developers catch flaws early in the lifecycle and implement a 'Security by Design' philosophy.

主な機能

01Detection of hardcoded secrets, insecure environment variables, and vault integration issues.

02Automated vulnerability detection focusing on the OWASP Top 10 risks.

03Comprehensive auditing of authentication, authorization, and cryptographic implementations.

0427 GitHub stars

05Structured security reporting with severity levels and actionable remediation code.

06Guidance on data protection compliance, including PII handling and GDPR requirements.

ユースケース

01Diagnosing identified vulnerabilities and generating detailed remediation plans for development teams.

02Conducting pre-deployment security audits to identify SQL injection, XSS, or broken access control.

03Reviewing sensitive code paths such as payment processing, authentication flows, and API endpoints.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbruniaux/ccboard security-guardian

For use in Claude.ai and ChatGPT

Download Skill