SkillHey.
Submit a skill

Security Review & Audit Skills for Claude Code, Codex & AI Agents

These skills let an agent inspect application code, exercise a web target, and turn findings into remediation work. The page brings together code review, OWASP testing, penetration workflows, hardening, and binary or CVE analysis.

25 skills

Explore Security Review & Audit skills

5 skills
RecommendedNewest first

Learn Claude Code Skills: Code Review

shareAI-lab

Review code for security, correctness, performance, maintainability and testing gaps.

  • code-review
  • security-review
  • quality-assurance
80.3KStars12.8KForks
Repository last pushed
Ponytail code reuse example
Free
Testing & security

Ponytail: Codebase Audit

Produce a ranked repository audit covering bugs, risky untested code, slow paths and code bloat.

189.4KStars10.5KForks
Repository last pushed
DietrichGebert
Ponytail code reuse example
Free
Testing & security

Ponytail: Code Review

Review a change and its connected code for correctness, safety, performance and unnecessary complexity.

189.4KStars10.5KForks
Repository last pushed
DietrichGebert

Find Security Vulnerabilities In Code

usestrix

Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert.

  • security-review
  • code-review
75.1KStars8.5KForks
Repository last pushed

Cloudflare Security Audit

cloudflare

Review security boundaries and investigate evidence-backed vulnerabilities across code, APIs, services and command-line tools.

  • security-audit
  • security-review
70.7KStars4.7KForks
Repository last pushed

Related topics

Security 26 skills

Related guides

How to choose Security Review & Audit skills

Use code review and OWASP entries for source and dependency findings, penetration entries for a running target, and binary analysis when the evidence is compiled code. A person should make the final risk decision.

  • Review an application against OWASP issues
  • Run a penetration workflow against a staging API
  • Turn a vulnerability finding into a remediation plan