web-security-reviewer
A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code.
Covers Google Apps Script (Workspace automation), frontend HTML/CSS/JS, and backend APIs (Node/Python/PHP/etc.). Particularly useful for reviewing AI-generated / vibe-coded code before it ships.
This skill is defensive only: it finds and patches vulnerabilities in your own code, and will not help write weaponized exploits or bypass security controls.
Install
Clone this repo (or copy its contents) into your Claude Code skills directory, e.g.:
git clone https://github.com/goingli0324/web-security-reviewer.git ~/.claude/skills/web-security-reviewer
Claude Code will pick it up automatically based on the triggers described in SKILL.md.
Contents
SKILL.md— skill definition, triggers, and workflowreferences/— reference material loaded on demand depending on tech stack (Apps Script, frontend, backend, data leakage, dependency scanning, AI-generated code patterns, stress/performance, report format)
License
MIT — see LICENSE.
No comments yet
Be the first to share your take.