How does it know if a finding is stale?

It uses git diff to compare the timestamp of the last scan against the current file system; if a file has changed since the scan, associated findings are flagged as stale.

What formats are supported for the security report?

You can output the dashboard in a standard ASCII text table, structured JSON for programmatic use, or Markdown for documentation purposes.

Does the status skill perform live security scanning?

No, the status skill reads existing data generated by other appsec commands like /appsec:run or /appsec:full-audit to provide a summary dashboard.

What should I do if the dashboard shows no data?

If no data is found, you should run /appsec:start to assess the project or /appsec:run to perform an initial security scan.

AppSec Security Dashboard

Name: AppSec Security Dashboard
Author: florianbuetow

byflorianbuetow

•

Security & Testing

Visualizes the current security posture of a project by aggregating scan results and tracking code changes since the last audit.

The AppSec Status skill provides a centralized security command center within Claude Code, allowing developers to quickly assess their project's vulnerability landscape. By reading state files from the .appsec directory, it generates a comprehensive dashboard that highlights critical findings, identifies files modified since the last scan, and maps vulnerabilities to frameworks like OWASP and STRIDE. It is an essential tool for maintaining security hygiene, helping users prioritize remediation efforts and understand scanner coverage without needing to re-run time-consuming audits.

Key Features

01Hotspot detection for files with high finding density

02Multi-format dashboard output (Text, JSON, Markdown)

03Severity-based prioritization of security vulnerabilities

04Scanner coverage tracking and framework compliance reporting

056 GitHub stars

06Git-integrated delta analysis to identify stale findings

Use Cases

01Reviewing project security health before a production release

02Exporting structured security summaries for compliance reporting

03Identifying unscanned files after a significant code refactor

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code status

For use in Claude.ai and ChatGPT

Download Skill