Security Reviewer
Analyzes code and configurations for common vulnerabilities, suggesting remediation steps based on industry best practices.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add hainamchung-security-reviewer npx -- -y @trustedskills/hainamchung-security-reviewer
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"hainamchung-security-reviewer": {
"command": "npx",
"args": [
"-y",
"@trustedskills/hainamchung-security-reviewer"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The hainamchung-security-reviewer skill analyzes text for potential security vulnerabilities and risks. It can identify common issues like SQL injection, cross-site scripting (XSS), and insecure deserialization patterns. The tool aims to improve code quality and reduce the likelihood of exploitable flaws in applications.
When to use it
- Code Review: Use this skill when reviewing newly written or modified code for potential security vulnerabilities before deployment.
- Security Audits: Integrate into automated security audit pipelines to proactively identify risks.
- Training & Education: Employ the skill to demonstrate common attack vectors and educate developers on secure coding practices.
- Vulnerability Assessment: Quickly assess existing applications or scripts for potential weaknesses.
Key capabilities
- Identifies SQL injection vulnerabilities.
- Detects cross-site scripting (XSS) risks.
- Recognizes insecure deserialization patterns.
- Provides analysis of text input to highlight security concerns.
Example prompts
- "Review this Python code snippet for potential SQL injection flaws: [code]"
- "Analyze the following JavaScript function and identify any XSS vulnerabilities: [function]"
- "Can you assess this configuration file for insecure deserialization risks? [file content]"
Tips & gotchas
The skill's effectiveness depends on the quality of the input text. It is best used with well-formatted code or clear descriptions of potential vulnerabilities to analyze.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.