Can it detect leaked API keys?

Yes, it uses sophisticated regex patterns to identify AWS keys, GitHub tokens, and other high-entropy strings that should never be stored in source control.

Does this skill perform live penetration testing?

No, it performs static analysis and provides guidance for running specialized audit tools to identify vulnerabilities within the source code and project dependencies.

Does it fix the vulnerabilities automatically?

It identifies issues and suggests safe code patterns or specific CLI commands (like npm audit fix or pip-audit) to help you remediate findings efficiently.

Which programming languages are supported?

It includes specific patterns for Python, JavaScript/TypeScript, and Go, but the general security principles and secrets detection apply to almost any codebase.

Security Checklist & Audit

Name: Security Checklist & Audit
Author: AnExiledDev

byAnExiledDev

•

安全与测试

Performs defense-in-depth security reviews including OWASP Top 10 compliance, secrets detection, and dependency vulnerability scanning.

The security-checklist skill equips Claude with a robust framework for identifying vulnerabilities across the entire application lifecycle. By focusing on a defense-in-depth mental model, it systematically audits input boundaries, trust transitions, and output points to detect risks like SQL injection, prototype pollution, and broken access control. It automates the detection of hardcoded credentials using high-entropy regex patterns and provides actionable commands for auditing dependencies across Python, JavaScript, Go, and Rust ecosystems, ensuring your codebase adheres to modern security standards like the OWASP Top 10.

主要功能

016 GitHub stars

02Defense-in-depth analysis of data boundaries and trust transitions

03Automated secrets detection for API keys, tokens, and private keys

04Cross-platform dependency CVE scanning and audit command generation

05OWASP Top 10 compliance auditing for common web vulnerabilities

06Language-specific vulnerability pattern recognition for Python, JS, and Go

使用场景

01Auditing third-party dependencies for known vulnerabilities before a release

02Scanning a repository for accidentally committed AWS keys or GitHub tokens

03Reviewing code for potential injection attacks or broken access control

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add anexileddev/codeforge security-checklist

For use in Claude.ai and ChatGPT

Download Skill