Curated Claude Code rules, commands, and skills for security engineering — by @ch0ks
This repository also configures its own agents. See what hackarandas-claude-toolbelt tells them →
ch0ks/hackarandas-claude-toolbelt
Skill Claude Code
Full security code review with Semgrep Pro scan, taint analysis, CWE mapping, OWASP Top 10 coverage, and generation of a formal Security Code Review Report saved to /security-review/ in the repository root. Use when reviewing code for vulnerabilities, auditing a file for security issues, or before merging…
ch0ks/hackarandas-claude-toolbelt
Skill Claude Code
Triage security findings from Semgrep Pro and Claude security-code-review using IaC files as deployment context (Terraform, Kubernetes, Docker Compose, CloudFormation, Azure Pipelines). Detects whichever IaC files are present, extracts deployment facts, scores each finding with CVSS 4.0 with per-vector justification…
ch0ks/hackarandas-claude-toolbelt
Skill Claude Code
Reads the most recent security-code-review report, generates minimal remediation patches for each finding using the Vibe Security Patching methodology, commits each patch with a conventional commit message referencing the finding and Semgrep rule ID, writes a formal Security Vibe Patch Report to…