Run a source-grounded paid-advertising audit for one or more of Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, and X. Use for full ad checks, account health reviews, paid-media diagnostics, partial audits after authentication or worker failure, missing-platform weighting, beta-feature eligibility and scoring, spend audits, tracking audits, or prioritized opportunities and risks.
Xget
Xget is an open-source security skill for Claude Code and compatible agents, published by xixu-me. Its author describes it as: “Ultra-high-performance, secure, all-in-one acceleration engine for developer resources”. The project has 8.2k stars on GitHub and is available under the AGPL-3.0-only license. Add it to your setup with `git clone https://github.com/xixu-me/xget ~/.claude/skills/xget`.
Installation
Add Xget to your agent with:
git clone https://github.com/xixu-me/xget ~/.claude/skills/xgetAlways review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
When to use it
Reach for Xget when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear AGPL-3.0-only license — safe to read and adapt
- Established project with 8,171 GitHub stars
- Actively maintained (recent commits)
Topics
Frequently asked questions
- What does Xget do?
- Ultra-high-performance, secure, all-in-one acceleration engine for developer resources
- How do I install Xget?
- Run git clone https://github.com/xixu-me/xget ~/.claude/skills/xget in your agent, then reload your skills. Review the source at https://github.com/xixu-me/xget before installing.
- Is Xget free to use?
- Yes. Xget is free and open source under the AGPL-3.0-only license, so you can read, run, and adapt it within that license's terms.
Related skills
More Security →
Secret management expert. ALWAYS invoke this skill when you need to read API keys, tokens, or other secrets configured by the user. Never hardcode credentials — use this skill to retrieve them securely.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI/CD pipeline security for prompt injection risks, or evaluating agentic action configurations.
Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use when starting an audit, threat model, or architecture review on unfamiliar code, and before any vulnerability-hunting pass.
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal).