claudeers.
// Security & Compliance

claude-skill-security-auditor

Claude Code skill for running structured security audits with actionable remediation plans

// Security & Compliance[ cli ][ claude ]#claude#claude-code#claude-skill#developer-tools#npm-audit#security#vulnerability$open-sourceupdated 21 days ago
Dormant
48/100
last commit 6 months ago
last release none
releases 0
open issues 0
// star history
★ 32 github ↗

Install with your AI

Paste into Claude Code, Cursor, or any agent — it reads the repo and wires the tool into your project.

⚠ Unverified source (community-unclaimed, low activity) — reveal the prompt
⚠ Unverified source (community-unclaimed, low activity). Inspect the repo before letting your agent install it.

Install and set up claude-skill-security-auditor (claude-skill project) into my current project.
Found on https://claudeers.com/claude-skill-security-auditor
Repo: https://github.com/wrsmith108/claude-skill-security-auditor
Homepage/docs: —
Detected install method: claude-skill → # copy this skill into .claude/skills/claude-skill-security-auditor/
Category: security. Platforms: cli.
Read the repo's README for exact setup and env vars, then install it and wire it into my project.

Claudeers Health Verdict:
dormant; community-verified: false. Confirm the source before running anything.
// or install directly (claude-skill)
# copy the skill dir into your project:
# .claude/skills/claude-skill-security-auditor/   (or ~/.claude/skills/claude-skill-security-auditor/ for all projects)
// or clone · unverified · not recently updated
git clone https://github.com/wrsmith108/claude-skill-security-auditor

// compatibility

Platformscli
Operating systems—
AI compatibilityclaude
License—
Pricingopen-source
LanguageTypeScript

Security Auditor

A Claude Code skill for running structured security audits with actionable remediation plans.

Installation

As a Claude Code Skill

# Clone to your Claude skills directory
git clone https://github.com/wrsmith108/claude-skill-security-auditor.git ~/.claude/skills/security-auditor

Standalone Usage

npx tsx scripts/index.ts [options]

Trigger Phrases

This skill activates when you mention:

  • "npm audit"
  • "security vulnerability"
  • "dependency vulnerability"
  • "CVE"
  • "security check"
  • "audit dependencies"
  • "check vulnerabilities"

Capabilities

  • Execute npm audit --json and parse structured output
  • Classify vulnerabilities by severity (critical, high, medium, low)
  • Extract CVE identifiers, affected versions, and fix versions
  • Distinguish direct vs transitive dependencies
  • Generate markdown reports with remediation commands
  • Support risk acceptance via security-exceptions.json
  • Provide CI-friendly exit codes

Usage

Basic Audit

npx tsx scripts/index.ts

JSON Output

npx tsx scripts/index.ts --json

Fail on High+ Severity (for CI)

npx tsx scripts/index.ts --fail-on high

Fail on Critical Only

npx tsx scripts/index.ts --fail-on critical

Audit a Specific Project

npx tsx scripts/index.ts --cwd /path/to/project

Risk Acceptance

Create a security-exceptions.json file in your project root to accept known risks:

{
  "exceptions": [
    {
      "id": "GHSA-xxxx-xxxx-xxxx",
      "reason": "Not exploitable in our usage context",
      "expires": "2025-06-01",
      "approvedBy": "security-team"
    }
  ]
}

Accepted vulnerabilities are tracked separately in the report.

Output Format

The skill generates a markdown report with:

  • Summary table by severity
  • Detailed breakdown of high+ severity issues
  • Transitive dependency analysis
  • Copy-paste remediation commands
  • List of accepted risks (if any)

Exit Codes

CodeMeaning
0No vulnerabilities above threshold
1Vulnerabilities found above threshold (with --fail-on)
2Error running audit

CI Integration

- name: Security Audit
  run: npx tsx scripts/index.ts --fail-on high

Requirements

  • Node.js and npm installed
  • Valid package.json in target directory
  • Optional: package-lock.json for accurate audit

Changelog

1.0.1 (2026-02-10)

  • Fixed: Replaced hardcoded ~/.claude/skills/ paths with relative paths for portability across different install locations

License

MIT

// faq

What is claude-skill-security-auditor?

Claude Code skill for running structured security audits with actionable remediation plans. It is open-source on GitHub.

Is claude-skill-security-auditor free to use?

claude-skill-security-auditor is open-source, so it is free to use.

What category does claude-skill-security-auditor belong to?

claude-skill-security-auditor is listed under security in the Claudeers registry of Claude-compatible tools.

2 views
★ 32 stars
unclaimed
updated 21 days ago

// embed badge

claude-skill-security-auditor on Claudeers
[![Claudeers](https://claudeers.com/api/badge/claude-skill-security-auditor.svg)](https://claudeers.com/claude-skill-security-auditor)

// retro hit counter

claude-skill-security-auditor hit counter
[![Hits](https://claudeers.com/api/counter/claude-skill-security-auditor.svg)](https://claudeers.com/claude-skill-security-auditor)

// reviews

// guestbook

0/500

// related in Security & Compliance

🔓
agency-agents

A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specia…

// securitymsitarzewski/⟨Shell⟩★ 145,494◷ MIT[ claude ]
🔓
RuView

π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.

// securityruvnet/⟨Rust⟩★ 91,307◷ MIT[ claude ]
🔓
prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

// securityprowler-cloud/⟨Python⟩★ 14,649◷ Apache-2.0[ claude ]
🔓
awesome-web-security

🐶 A curated list of Web Security materials and resources.

// securityqazbnm456/⟨Python⟩★ 13,709[ claude ]
→ see how claude-skill-security-auditor connects across the ecosystem