rea
Reverse engineer anything with agents, from app behavior down to native binaries.
420k
@morlutoSecurity
Plugin
web-security-reviewer
A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code.
Plugin Signal48/100Fair
maintained75
capable14
documented75
adopted17
Claude Code
$ npx -y skills add goingli0324/web-security-reviewer --agent claude-code
Codex
$ npx skills add goingli0324/web-security-reviewer -a codex
Cursor
$ npx skills add goingli0324/web-security-reviewer -a cursor
Gemini CLI
$ npx skills add goingli0324/web-security-reviewer -a gemini-cli
GitHub Copilot
$ npx skills add goingli0324/web-security-reviewer -a github-copilot
OpenCode
$ npx skills add goingli0324/web-security-reviewer -a opencode
Windsurf
$ npx skills add goingli0324/web-security-reviewer -a windsurf
Stats
5
Stars
0
Forks
Maintained
Maintenance
MIT
License
Last commit
Created
What's inside
README
web-security-reviewer
A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code.
Covers Google Apps Script (Workspace automation), frontend HTML/CSS/JS, and backend APIs (Node/Python/PHP/etc.). Particularly useful for reviewing AI-generated / vibe-coded code before it ships.
This skill is defensive only: it finds and patches vulnerabilities in your own code, and will not help write weaponized exploits or bypass security controls.
Install
Clone this repo (or copy its contents) into your Claude Code skills directory, e.g.:
git clone https://github.com/goingli0324/web-security-reviewer.git ~/.claude/skills/web-security-reviewer
Claude Code will pick it up automatically based on the triggers described in SKILL.md.
Contents
SKILL.md— skill definition, triggers, and workflowreferences/— reference material loaded on demand depending on tech stack (Apps Script, frontend, backend, data leakage, dependency scanning, AI-generated code patterns, stress/performance, report format)
License
MIT — see LICENSE.
Stars on GitHub
Momentum
- stars in total
- 5
File tree
Similar plugins.
@morlutoreverse-skill
A skill pack for authorized reverse engineering, security research, and penetration testing that routes tasks to the right skill and sets up needed tools on demand. It covers API security assessment and Android APK analysis, among others.
46 skills44k
@zhaoxuya520cybersecurity-skills
Gives an AI agent the step-by-step workflow a senior security analyst follows, covering when to use each technique, what to check first, how to run it and how to verify the result. Covers incident response, forensics, threat intelligence, malware analysis, penetration testing and red teaming.
200 skills36k
@mukul975watermarks-remover
Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files, for privacy and hygiene on content you own. The skill is a thin client: it drives the machinery over HTTP, so the agent host needs no Python.
2 skills1 hook26k
@guillaumemeyerQuestions about web-security-reviewer.
A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code. Install it with the command on its page. It includes web-security-reviewer. Its skills do not fire on their own yet. Free and open source.
- What is web-security-reviewer?
- A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code.
- How do I install web-security-reviewer?
- Run these in Claude Code: npx -y skills add goingli0324/web-security-reviewer --agent claude-code. Then prompt normally.
- Does web-security-reviewer auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin.
- Is web-security-reviewer free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
- Which coding agents can use web-security-reviewer's skills?
- web-security-reviewer installs in Claude Code, and its skills also install in Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI. Each skill's page has the install command. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it