Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
This skill provides security guidance and vulnerability reviews for a wide range of technical assets, including CLI tools, libraries, daemons, and APIs. It is designed to assist security engineers in performing focused reviews or comprehensive end-to-end audits.
By structuring the analysis of codebases, the skill helps practitioners conduct penetration tests and vulnerability research more systematically, producing report artifacts for explicit audit requests.
WHO IT'S FOR
Security engineers
performing automated vulnerability research and pen tests
Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
Follow the documented setup, then try a first task.
Default Skills CLI installation
Installs: Default non-global installation of the security-audit skill
Before you start
A coding agent whose model supports tool use and parallel sub-agents
Node.js for the findings and coverage-ledger validators
An OS-enforced sandbox that disables external networking, uses a sanitized allowlisted environment, enforces resource limits, and restricts writes to assigned scratch paths for any target-controlled execution
Run this command in a terminal to install the security-audit skill using the Skills CLI.
Installs: User-level global installation of the security-audit skill
Before you start
A coding agent whose model supports tool use and parallel sub-agents
Node.js for the findings and coverage-ledger validators
An OS-enforced sandbox that disables external networking, uses a sanitized allowlisted environment, enforces resource limits, and restricts writes to assigned scratch paths for any target-controlled execution
Run this command in a terminal to install the security-audit skill at user level.
Review one source directory for security vulnerabilities
Uses security-audit
Replace ./src with the path to the source directory you want reviewed.
Use the security-audit skill in guidance mode to review the code under ./src for security vulnerabilities. Use read-only source inspection. Report any source-grounded candidate with its affected trust boundary, evidence, and smallest effective fix; if no candidate is established, say so instead of inventing one. Do not create full-audit artifacts or run target code.
Claude