Skip to content
SlashClone

Security audit for your web app before launch

@slashclone/security-review-checklist

Get a written security audit of your web app before launch or after a big feature. Covers the API, sign-in and OAuth, MCP connectors or CLIs, and file uploads, and writes a threat model plus numbered findings with severity, fix, and how each fix was verified. Reads the code and runs signed-out checks only; never changes your code.

SkillDevOpsv0.1.1 (latest)
Activity
New: be the first to try it

What this kit declares, in the same words the CLI shows before you install. On Claude Code the CLI turns these into permission rules, so the agent stops anything undeclared.

  • Reads

    Reads files in ./**

  • Writes

    Writes files in ./docs/security-review/**

Works with
claude-code
License
MIT

Cookies that keep you signed in and remember these choices are always on. Everything else is off until you turn it on.