Overview
skill-security-auditor is an open-source security skill for Claude Code and compatible agents, published by eigent-ai. Its author describes it as: “Security auditing for code, configs, and infrastructure. Use when the user wants to audit or improve security: scan for vulnerabilities (SQL injection, XSS, command injection, path traversal), detect hardcoded secrets…”. The project has 15k stars on GitHub and is available under the Apache-2.0 license. Add it to your setup with `git clone https://github.com/eigent-ai/eigent ~/.claude/skills/skill-security-auditor`.
What skill-security-auditor does
This guide covers security auditing workflows for source code, dependencies, and configurations. For detailed vulnerability patterns and detection rules, see references/vulnerability-patterns.md. For secrets detection patterns, see references/secrets-patterns.md.
Best for
What’s inside
The SKILL.md for skill-security-auditor is organised into these sections:
- Overview
- Quick Start
- Testing the scripts
- Audit Workflow
- 1. Reconnaissance
- 2. Secrets Detection
- 3. Vulnerability Scanning
- 4. Dependency Audit
- 5. Configuration Review
- 6. Authentication and Authorization Review
- Report Format
- Next Steps
Installation
Add skill-security-auditor to your agent with:
git clone https://github.com/eigent-ai/eigent ~/.claude/skills/skill-security-auditorReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
Neither the skill nor its repository names a specific agent. It uses the SKILL.md format, which several agents can load — check the repository for any agent-specific requirements.
License
skill-security-auditor is published under the Apache-2.0 license.
Strengths
- Clear Apache-2.0 license — safe to read and adapt within its terms
- Ships in eigent-ai/eigent, an established project with 15,032 GitHub stars
- Actively maintained — repository updated in the last 90 days
Author
Topics
Alternatives to skill-security-auditor
Similar skills from other repositories:
Frequently asked questions
- What does skill-security-auditor do?
- Security auditing for code, configs, and infrastructure. Use when the user wants to audit or improve security: scan for vulnerabilities (SQL injection, XSS, command injection, path traversal), detect hardcoded secrets and credentials, review auth and authorization, check dependencies for known CVEs, audit config files for insecure defaults, or generate security reports. Trigger on "security audit", "vulnerability scan", "code review for security", "find secrets", "check for vulnerabilities", "OWASP", "CVE", or questions about code security.
- How do I install skill-security-auditor?
- Run git clone https://github.com/eigent-ai/eigent ~/.claude/skills/skill-security-auditor in your agent, then reload your skills. Review the source at https://github.com/eigent-ai/eigent before installing.
- Is skill-security-auditor free to use?
- Yes. skill-security-auditor is free and open source under the Apache-2.0 license, so you can read, run, and adapt it within that license's terms.
- Where does skill-security-auditor come from?
- skill-security-auditor ships inside eigent-ai/eigent, a repository that contains 7 catalogued skills in total. The repository's 15,032 GitHub stars apply to that whole collection, not to this skill on its own.
