cdmx-in/security-review

22 stars · Last commit 2026-08-07

Claude Code skill that runs real security scanners (Semgrep, gitleaks, TruffleHog, Trivy, osv-scanner, ZAP) then verifies every finding against source. SAST, secrets across full git history, SCA, IaC, Supabase/Firebase RLS. One report tagged to OWASP Top 10 2025.

PluginTDD & Testing Debugging Documentation DevOps & Infra AI & Prompting Data & ML Security

README preview

<div align="center">

# Security Audit

**A Claude Code skill that runs real security scanners — then verifies every finding against source.**

[![Version](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fraw.githubusercontent.com%2Fcdmx-in%2Fsecurity-review%2Fmain%2F.claude-plugin%2Fplugin.json&query=%24.version&prefix=v&label=version&color=informational)](.claude-plugin/plugin.json)
[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
[![Claude Code](https://img.shields.io/badge/Claude%20Code-plugin-8A63D2)](https://code.claude.com/docs/en/plugins)
[![OWASP Top 10](https://img.shields.io/badge/OWASP-Top%2010%3A2025-000000)](https://owasp.org/Top10/2025/)
[![Always-on cost](https://img.shields.io/badge/context%20cost-~174%20tokens-brightgreen)](#cost)

<img src="assets/demo.svg" alt="security-audit terminal demo" width="680">

```
/plugin marketplace add cdmx-in/security-review
/plugin install security-audit@cdmx-security
```

<sub>Built and maintained by <a href="https://cdmx.in">Codemax IT Solutions Pvt. Ltd.</a></sub>

View full repository on GitHub →