zebbern/claude-code-guide · skills/code-vuln-audit/SKILL.md
code-vuln-audit skillF
Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL injection, XSS, or command injection. Use when the user mentions security scans, vulnerability detection, secret leaks, API keys, OWASP, npm audit, pip-audit, hardcoded passwords, or code security checks.
Latest version
mdr add zebbern/claude-code-guide/code-vuln-audit@git:20260531.164971dExact content
mdr add zebbern/claude-code-guide/code-vuln-audit@sha256:cdc849e89e8646f3Badge
[](https://markdownregistry.com/a/art_cemuegm2gva2zxf6)
0 badge views in 30 days
Versions
Audit of the latest version
F 16 of 17 checks passed. Deterministic, no model, same answer every run.
- FAIL, critical: No credential-shaped string (matched: AKIAIOSFODNN7EXAMPLE)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5363 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
zebbern/claude-code-guide · 4,603 stars · license MIT · pushed 2026-09-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cemuegm2gva2zxf6 GET https://markdownregistry.com/api/v1/resolve?ref=zebbern/claude-code-guide/code-vuln-audit GET https://markdownregistry.com/api/v1/blob/cdc849e89e8646f3d7c29c9914077fd7788e1a2f99e8dd2263741cf549e0b98f