Security-Phoenix-demo/security-skills-claude-code

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Analyze code changes (commits, PRs, files) for potential zero-day security vulnerabilities using LLM-powered analysis. This skill provides conversational access to the 0-Day Scanner Agent with real-time token monitoring and knowledge graph integration.

Security-Phoenix-demo/security-skills-claude-code

Agent Claude Code

Multi-language AppSec review subagent. Use proactively when adding endpoints, modifying auth/RBAC, rendering dynamic content, handling outbound HTTP, updating dependencies, or completing a major feature. Reads the security-reviewer skill (.claude/skills/security-reviewer/SKILL.md) for its 8-point check and…

Security-Phoenix-demo/security-skills-claude-code

Hook Claude Code

Runs when a session starts, executing session-start.sh. From Security-Phoenix-demo/security-skills-claude-code.

Security-Phoenix-demo/security-skills-claude-code

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, executing pre-bash-package-guard.sh. From Security-Phoenix-demo/security-skills-claude-code.

Security-Phoenix-demo/security-skills-claude-code

Hook Claude Code

Runs after a tool call finishes for Edit, Write and MultiEdit tool calls, executing post-edit-quickscan.sh. From Security-Phoenix-demo/security-skills-claude-code.

Security-Phoenix-demo/security-skills-claude-code

Settings file Claude Code

Agent settings declaring 3 hook events (SessionStart, PreToolUse, PostToolUse).

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Multi-language security review for web apps, APIs, and CLIs. Use whenever code is added or modified — new endpoints, auth/RBAC changes, template or DOM rendering, outbound HTTP, dependency updates, IaC/config changes, or end-of-feature reviews. Covers Python, JavaScript, TypeScript, Go, Rust, Java/Kotlin, Ruby…

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Multi-language security review for web apps, APIs, and CLIs. Use whenever code is added or modified — new endpoints, auth/RBAC changes, template or DOM rendering, outbound HTTP, dependency updates, IaC/config changes, or end-of-feature reviews. Covers Python, JavaScript, TypeScript, Go, Rust, Java/Kotlin, Ruby…

Security-Phoenix-demo/security-skills-claude-code

Command

Scan the current branch's diff (vs main) for 0-day-style vulnerabilities. Light, fast, PR-focused.

Security-Phoenix-demo/security-skills-claude-code

Command

Full OWASP Top 10 + ASVS L1 security assessment of the codebase. Slow + thorough.

Security-Phoenix-demo/security-skills-claude-code

Command

Multi-language security review (8-point check) on recent changes. Routes to the bundled stronger reviewer when present, falls back to the lite reviewer otherwise.

Security-Phoenix-demo/security-skills-claude-code

Command

Generate a STRIDE/DREAD threat model for the repository, a feature, or a component.

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Run comprehensive security assessment covering OWASP Top 10 2025 and ASVS Level 1 requirements. This skill provides automated, full-codebase security analysis with real-time token monitoring, knowledge graph integration, and automated test generation.

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Purpose: Automated threat modeling from code analysis using STRIDE/DREAD methodologies.

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Search for threat intelligence, CVEs, malware analysis, breach reports, and security research across 300+ curated security domains (BleepingComputer, Hacker News, Krebs, Unit42, Talos, CISA, Mandiant, Rapid7, Securelist, etc.). Use this skill whenever the user asks to: research a CVE or vulnerability, find what…

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. Browser automation, library management, persistent auth. Drastically reduced hallucinations through document-only responses.

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Use when the user wants to research vulnerabilities and create opengrep/semgrep SAST rules, conduct security research on CVEs or CWEs with web search, generate detection rules from vulnerability analysis, or build comprehensive security scanning coverage for a codebase.

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Use when the user wants to create opengrep/semgrep SAST rules, detect vulnerabilities in code, generate security scanning rules from CVEs or vulnerability descriptions, or asks about writing pattern-matching or taint-analysis rules for static analysis.

Security-Phoenix-demo/security-skills-claude-code

Skill Claude CodeCodex

Generate a full security-focused PRD (Product Requirements Document) from a plain-language feature description. Use this skill whenever someone wants to create a PRD, product spec, feature spec, requirements document, or says things like "write a PRD for", "create a spec for", "plan this feature", "document this…