Made by@slashcloneSecurity audit for your web app before launch
@slashclone/security-review-checklist
Get a written security audit of your web app before launch or after a big feature. Covers the API, sign-in and OAuth, MCP connectors or CLIs, and file uploads, and writes a threat model plus numbered findings with severity, fix, and how each fix was verified. Reads the code and runs signed-out checks only; never changes your code.
SkillDevOpsv0.1.0
- Activity
- New: be the first to try it
- Installs
- 0 installs
- Likes
- 0 likes
- Clones
- 0 clones
- 1{
- 2 "name": "security-review-checklist",
- 3 "owner": "slashclone",
- 4 "version": "0.1.0",
- 5 "type": "skill",
- 6 "description": "Run a structured security review of a web app and its API, OAuth server, MCP connector or CLI, and any path that installs or runs user-supplied files. Writes a threat model, architecture notes, and numbered findings with severity, fix, and how each fix was verified. Reads the code, never changes it, and writes only to the review docs folder.",
- 7 "category": "devops",
- 8 "license": "MIT",
- 9 "compat": ["claude-code"],
- 10 "permissions": {
- 11 "files": {
- 12 "read": ["**"],
- 13 "write": ["docs/security-review/**"]
- 14 }
- 15 }
- 16}