关于
This skill acts as a master framework for end-to-end security analysis within Claude Code. It automatically detects the project's technology stack—ranging from Node.js and Python to Rust and Java—and orchestrates a multi-phased security review. By combining native dependency audits (SCA), static code analysis (SAST), and advanced data flow tracing, it identifies critical vulnerabilities such as injections, broken authentication, and memory safety issues. Beyond simple detection, it provides context-aware risk assessments using CVSS standards and generates actionable remediation plans, including specific upgrade guidance and security hardening patches.
