A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code.
FAQ
web-security-reviewer is a Claude Code plugin with 1 hand-picked skill for security work, indexed on Flowy. Install it with the command on its page. It includes web-security-reviewer. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.
$ npx -y skills add goingli0324/web-security-reviewer --agent claude-code
Repo: goingli0324/web-security-reviewer
A Claude Code skill for defensive security review of your own code. Detects security vulnerabilities, data-leakage risks, stress/performance risks, and code quality issues, then produces a severity-ranked risk report plus corrected code.
Covers Google Apps Script (Workspace automation), frontend HTML/CSS/JS, and backend APIs (Node/Python/PHP/etc.). Particularly useful for reviewing AI-generated / vibe-coded code before it ships.
This skill is defensive only: it finds and patches vulnerabilities in your own code, and will not help write weaponized exploits or bypass security controls.
Clone this repo (or copy its contents) into your Claude Code skills directory, e.g.:
git clone https://github.com/goingli0324/web-security-reviewer.git ~/.claude/skills/web-security-reviewer
Claude Code will pick it up automatically based on the triggers described in SKILL.md.
SKILL.md — skill definition, triggers, and workflowreferences/ — reference material loaded on demand depending on tech stack (Apps Script, frontend, backend, data leakage, dependency scanning, AI-generated code patterns, stress/performance, report format)MIT — see LICENSE.
LICENSE README.md references/ ai-generated-code.md data-leakage.md dependency-scanning.md report-format.md security-apps-script.md security-backend.md security-frontend.md stress-and-performance.md SKILL.md
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic