Which specific vulnerabilities can it detect?

It identifies SQL injection, hardcoded passwords/API keys, unescaped user input (XSS), unsafe eval() calls, and missing authentication checks.

Is this a replacement for professional security tools?

No, it is a proactive awareness tool meant to complement formal security scanners, linting tools, and manual security reviews.

How do I perform a deeper analysis after a hint?

The skill will suggest specific commands such as /quick-check, /review [file], or /deep-review to initiate a more thorough security scan.

Does it perform a full security audit of my codebase?

No, it provides lightweight hints for visible code. It is designed to be fast and non-disruptive, suggesting commands like /deep-review for full audits.

What does the Security Hint skill do?

It monitors code within your conversation to flag potential security risks like hardcoded secrets, injection vulnerabilities, and improper input handling.

Security Hint

Name: Security Hint
Author: AlexeyTripleA

byAlexeyTripleA

•

Security & Testing

Identifies potential security vulnerabilities and secret exposures in real-time to promote safer development practices.

Security Hint acts as a lightweight security awareness layer for Claude Code, flagging common vulnerabilities such as SQL injection, hardcoded API keys, and cross-site scripting (XSS) as you work. Rather than performing an intrusive full-system audit, it provides concise, non-disruptive alerts when it detects risky patterns in the current conversation, guiding you toward more secure implementation patterns and suggesting comprehensive scanning tools for deeper analysis.

Key Features

01Detection of unsafe dynamic code execution like eval()

02Context-aware recommendations for comprehensive security reviews

03Identification of unescaped user input and XSS risks

04Instant alerts for SQL injection patterns and string concatenation

05Real-time detection of hardcoded credentials and API keys

062 GitHub stars

Use Cases

01Validating code snippets for sensitive data before committing to version control

02Spotting common OWASP Top 10 vulnerabilities during the initial coding phase

03Learning secure coding practices through immediate, actionable feedback

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add alexeytriplea/claude-code-plugins security-hint

For use in Claude.ai and ChatGPT

Download Skill