Which specific vulnerabilities can it detect?

It identifies SQL injection, hardcoded passwords/API keys, unescaped user input (XSS), unsafe eval() calls, and missing authentication checks.

Is this a replacement for professional security tools?

No, it is a proactive awareness tool meant to complement formal security scanners, linting tools, and manual security reviews.

How do I perform a deeper analysis after a hint?

The skill will suggest specific commands such as /quick-check, /review [file], or /deep-review to initiate a more thorough security scan.

Does it perform a full security audit of my codebase?

No, it provides lightweight hints for visible code. It is designed to be fast and non-disruptive, suggesting commands like /deep-review for full audits.

What does the Security Hint skill do?

It monitors code within your conversation to flag potential security risks like hardcoded secrets, injection vulnerabilities, and improper input handling.

Security Hint

Name: Security Hint
Author: AlexeyTripleA

byAlexeyTripleA

•

Security & Testing

Identifies potential security vulnerabilities and secret exposures in real-time to promote safer development practices.

About

Security Hint acts as a lightweight security awareness layer for Claude Code, flagging common vulnerabilities such as SQL injection, hardcoded API keys, and cross-site scripting (XSS) as you work. Rather than performing an intrusive full-system audit, it provides concise, non-disruptive alerts when it detects risky patterns in the current conversation, guiding you toward more secure implementation patterns and suggesting comprehensive scanning tools for deeper analysis.

Key Features

Detection of unsafe dynamic code execution like eval()
Context-aware recommendations for comprehensive security reviews
Identification of unescaped user input and XSS risks
Instant alerts for SQL injection patterns and string concatenation
Real-time detection of hardcoded credentials and API keys
2 GitHub stars

Use Cases

Validating code snippets for sensitive data before committing to version control
Spotting common OWASP Top 10 vulnerabilities during the initial coding phase
Learning secure coding practices through immediate, actionable feedback

About

Key Features

Detection of unsafe dynamic code execution like eval()
Context-aware recommendations for comprehensive security reviews
Identification of unescaped user input and XSS risks
Instant alerts for SQL injection patterns and string concatenation
Real-time detection of hardcoded credentials and API keys
2 GitHub stars

Use Cases

Validating code snippets for sensitive data before committing to version control
Spotting common OWASP Top 10 vulnerabilities during the initial coding phase
Learning secure coding practices through immediate, actionable feedback