# claude-security-skills

Security skills for Claude Code. Install them once and ask Claude, in plain language, to scan a repo for leaked secrets, review Python code, red-team an LLM for prompt injection, or audit HTTP headers, JWTs, Dockerfiles, CORS, and dependencies.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/novacode37-claude-security-skills
- Source: https://github.com/NovaCode37/claude-security-skills
- Price: free and open source

## Summary
claude-security-skills is a Claude Code plugin with 8 hand-picked skills for security work, indexed on Flowy. Install it with the command on its page. It includes cors-auditor, dependency-check, dockerfile-scan. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
npx -y skills add novacode37/claude-security-skills
```

## Skills
- cors-auditor
- dependency-check
- dockerfile-scan
- http-sec-audit
- jwt-inspector
- prompt-injection-tester
- sast-lite
- secret-scanner

## FAQ

### What is claude-security-skills?
Security skills for Claude Code. Install them once and ask Claude, in plain language, to scan a repo for leaked secrets, review Python code, red-team an LLM for prompt injection, or audit HTTP headers, JWTs, Dockerfiles, CORS, and dependencies.

### How do I install claude-security-skills?
Run these in Claude Code: npx -y skills add novacode37/claude-security-skills. Then prompt normally.

### Does claude-security-skills auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is claude-security-skills free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.