← All skills
security-audit
45 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By staruhub/ClaudeSkills (GitHub) · security · 736 stars · scanned at commit 66e02d2
全面的代码安全检查和服务器安全审计skill。适用于：(1) 代码漏洞扫描 - 检测SQL注入、XSS、SSRF等OWASP Top 10漏洞，(2) 依赖安全检查 - 识别过时或有漏洞的第三方库，结合实时搜索确认最新CVE，(3) 服务器配置审计 - 检查SSH、防火墙、权限等安全配置，(4) 敏感信息泄露检测 - API密钥、密码、令牌等硬编码检测，(5) 容器安全扫描 - Docker镜像和Kubernetes配置审计，(6) CI/CD安全检查。触发关键词："安全检查"、"漏洞扫描"、"代码审计"、"security audit"、"vulnerability scan"、"SAST"、"dependency check"、"CVE检测"等。不用于：修复单个已定位的bug、编写新的安全功能代码、对无授权的第三方系统做扫描或渗透测试。
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 11 places.
Show 8 more
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 25 places.
Show 17 more
- skills/Geek-skills-security-audit/SKILL.md, line 104
npm audit --json > npm_audit.json - skills/Geek-skills-security-audit/SKILL.md, line 116
semgrep scan --config=auto --json > semgrep_report.json - skills/Geek-skills-security-audit/SKILL.md, line 130
grep -E "^(PermitRootLogin|PasswordAuthentication|PubkeyAuthentication)" /etc/ssh/sshd_config - skills/Geek-skills-security-audit/SKILL.md, line 136
sudo ufw status verbose - skills/Geek-skills-security-audit/SKILL.md, line 145
find / -perm -4000 -type f 2>/dev/null - skills/Geek-skills-security-audit/references/detection_rules.md, line 74
os.system("ping " + user_input) - skills/Geek-skills-security-audit/references/detection_rules.md, line 75
subprocess.call("ls " + filename, shell=True) - skills/Geek-skills-security-audit/references/detection_rules.md, line 76
os.popen("cat " + filepath) - skills/Geek-skills-security-audit/references/detection_rules.md, line 79
subprocess.run(["ping", user_input], shell=False) - skills/Geek-skills-security-audit/references/detection_rules.md, line 80
subprocess.run(["ls", filename], shell=False) - skills/Geek-skills-security-audit/references/detection_rules.md, line 86
child_process.execSync(`cat ${filepath}`); - skills/Geek-skills-security-audit/references/detection_rules.md, line 97
child_process\.exec(Sync)?\s*\(`[^`]*\$\{ - skills/Geek-skills-security-audit/references/remediation_guide.md, line 140
os.system(f"ping {host}") - skills/Geek-skills-security-audit/references/remediation_guide.md, line 144
subprocess.run(["ping", "-c", "4", host], capture_output=True) - skills/Geek-skills-security-audit/scripts/dependency_check.py, line 253
result = subprocess.run( - skills/Geek-skills-security-audit/scripts/dependency_check.py, line 269
result = subprocess.run( - skills/Geek-skills-security-audit/scripts/dependency_check.py, line 280
result = subprocess.run(
and 5 more places
Connects to the internet
The author does not mention this. Expected for a security skill.
Found in 7 places.
Show 4 more
Changes files outside its own folder
The author does not mention this.
Found in 4 places.
Show 1 more
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 3 places.
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'security-audit' ] || [ -L ~/.agents/skills/'security-audit' ]; then echo 'A skill folder named security-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/staruhub/ClaudeSkills' "$d" && git -C "$d" checkout --quiet '66e02d23642f0c63ccb07b46a88104eade402d44' -- 'skills/Geek-skills-security-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/Geek-skills-security-audit' ~/.agents/skills/'security-audit' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-audit' ~/.claude/skills/'security-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for staruhub/ClaudeSkills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/staruhub/ClaudeSkills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 66e02d2 | 45 |
| 2026-11-07 | 66e02d2 | 45 |