关于
The Security Code Auditor skill empowers Claude to perform deep-dive security reviews by systematically analyzing codebases for common vulnerabilities. It follows a rigorous set of criteria including authentication flows, injection risks (SQL, NoSQL, Command), input sanitization, and data protection. By leveraging tools like Grep and Glob, it identifies hardcoded secrets, insecure API configurations, and outdated dependencies, ensuring that your application adheres to modern security best practices and is resilient against exploits like XSS, CSRF, and SSRF.
