Skip to content
SlashClone

Security audit for your web app before launch

@slashclone/security-review-checklist

Get a written security audit of your web app before launch or after a big feature. Covers the API, sign-in and OAuth, MCP connectors or CLIs, and file uploads, and writes a threat model plus numbered findings with severity, fix, and how each fix was verified. Reads the code and runs signed-out checks only; never changes your code.

SkillDevOpsv0.1.1 (latest)
Activity
New: be the first to try it
  1. 1{
  2. 2 "name": "security-review-checklist",
  3. 3 "owner": "slashclone",
  4. 4 "version": "0.1.1",
  5. 5 "type": "skill",
  6. 6 "title": "Security audit for your web app before launch",
  7. 7 "description": "Get a written security audit of your web app before launch or after a big feature. Covers the API, sign-in and OAuth, MCP connectors or CLIs, and file uploads, and writes a threat model plus numbered findings with severity, fix, and how each fix was verified. Reads the code and runs signed-out checks only; never changes your code.",
  8. 8 "category": "devops",
  9. 9 "license": "MIT",
  10. 10 "compat": [
  11. 11 "claude-code"
  12. 12 ],
  13. 13 "permissions": {
  14. 14 "files": {
  15. 15 "read": [
  16. 16 "**"
  17. 17 ],
  18. 18 "write": [
  19. 19 "docs/security-review/**"
  20. 20 ]
  21. 21 }
  22. 22 }

Cookies that keep you signed in and remember these choices are always on. Everything else is off until you turn it on.