Audits shell scripts and Python code to identify and remediate security vulnerabilities and anti-patterns.
The Security Auditor skill provides a specialized automated workflow for scanning codebases—particularly shell scripts—for common security risks. It utilizes pattern-based detection to uncover critical vulnerabilities like TOCTOU race conditions, command injection, and symlink attacks, while offering remediation advice and severity mapping. By integrating this skill into your Claude Code workflow, you can ensure your scripts adhere to secure coding standards and protect against exploits like path traversal or unsafe environment variable usage.
Key Features
01Detection of TOCTOU (Time-of-Check to Time-of-Use) race conditions
02Identification of unsafe symlink following and temporary file creation
03Scanning for command and path injection vulnerabilities (CWE-78, CWE-22)
04Comprehensive audit reporting with actionable remediation steps
05Automated severity mapping with CVSS scores for prioritized fixing
060 GitHub stars
Use Cases
01Scanning Python dependencies for known CVEs and environment risks
02Performing a security review of legacy shell scripts before deployment
03Implementing a security-first audit pipeline for script-heavy repositories
