Claude Skills · DevOps & Infrastructure
Security Reviewer
Jeffallan/claude-skillsIdentifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists.
At a glance
This skill is for DevOps & Infrastructure and helps you review code for security vulnerabilities, conduct security audits, and perform dependency audits.
/plugin marketplace add Jeffallan/claude-skills
/plugin install security-reviewer
Setup, runtime and requirements describe Jeffallan/claude-skills, the repo this skill ships in.
Sastpenetration-testingdevsecopscomplianceVulnerability ScanningRemediation
Also in Jeffallan/claude-skills
View the repoGenerates Angular 17+ standalone components, configures advanced routing with lazy loading and guards, implements NgRx state management, app...
Use when designing REST or GraphQL APIs, creating OpenAPI specifications, or planning API architecture. Invoke for resource modeling, versio...
Use when designing new high-level system architecture, reviewing existing designs, or making architectural decisions. Invoke to create archi...
Integrates with Atlassian products to manage project tracking and documentation via MCP protocol. Use when querying Jira issues with JQL fil...
Designs chaos experiments, creates failure injection frameworks, and facilitates game day exercises for distributed systems — producing runb...
Use when building CLI tools, implementing argument parsing, or adding interactive prompts. Invoke for parsing flags and subcommands, display...
Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies...
Generates, formats, and validates technical documentation — including docstrings, OpenAPI/Swagger specs, JSDoc annotations, doc portals, and...
Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 qu...
Writes, optimizes, and debugs C++ applications using modern C++20/23 features, template metaprogramming, and high-performance systems techni...
Use when building C# applications with .NET 8+, ASP.NET Core APIs, or Blazor web apps. Builds REST APIs using minimal or controller-based ro...
Optimizes database queries and improves performance across PostgreSQL and MySQL systems. Use when investigating slow queries, analyzing exec...
Other DevOps & Infrastructure skills
Wire dependency-cruiser into a TypeScript repo so each package is a deep module — implementation hidden in subfolders, reachable only throug...
Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wan...
Configure this repo for the engineering skills — set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before f...
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-comm...
Generate an interactive bash wizard that walks a human through a manual procedure — third-party setup, a one-off migration, an A→B state tra...
Analyze a screen recording of a manual process and produce targeted, working automation scripts. Extracts frames and audio narration from vi...