#appsec

A SKILL that turns a code diff into an evidence-backed ledger of hidden assumptions, failure modes, and falsification tests.

Production-ready Claude Code skills for cybersecurity — secret scanning, SAST, prompt-injection testing, HTTP/JWT/dependency auditing. Zero dependencies.

Benchmark for AI agents proving multi-tenant SaaS authorization bugs

AI-powered AppSec reviews for Git commits 🩹

Defensive security audit skills for Claude — tech-stack-keyed and audit-domain-keyed packs for SaaS apps.

Source code security scanner for human-written and AI-generated projects. Rust CLI with explicit coverage, JSON/SARIF, and coding-agent integrations. Built by Tom Koentjes. Pre-alpha.

Audit your vibe-coded app for security holes (secrets, RLS, auth, injection, config), score it, and — with your approval — fix them in your code. A Claude Code / Codex skill. By Kapus.

Claude Code skill for auditing Next.js apps for secrets exposed in the client JS bundle

Claude Code plugin marketplace for security auditing. evidence-based skills for constant-time crypto review, compiler-survival checks in binaries, and zero-trust codebase audits.

Security auditor and scanner for AI-built (vibe-coded) apps — a Claude Code skill + standalone cross-stack scanner.

Stops the insecure prompt before your AI agent runs it - and audits what it already shipped. Deterministic Claude Code guardrail (no LLM) catching "disable RLS" or "service_role in the frontend" in en/es/pt, plus a read-only scanner for exposed secrets, open Supabase RLS and Firebase leaks.

Security scanner for AI-generated code — GitHub Action + CLI wrapping Semgrep, Gitleaks, and an AI-agent-specific rule pack.