NovaCode37

NovaCode37/claude-security-skills

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

11 stars 5 forks 11 watchers Python MIT License

ai-security anthropic appsec claude claude-code claude-plugin claude-skills cybersecurity devsecops jwt llm-security prompt-injection python red-team sast secret-scanning secrets-detection security-scanner security-tools static-analysis

41 Open Issues Need Help Last updated: Sep 5, 2026

Open Issues Need Help

View All on GitHub

Ship a pre-commit hook definition about 9 hours ago

enhancement good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

http-sec-audit and cors-auditor take exactly one URL about 10 hours ago

enhancement good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

dependency-check: read lockfiles, where the vulnerable versions actually are about 10 hours ago

enhancement help wanted

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

Nothing here looks at docker-compose.yml about 10 hours ago

enhancement help wanted

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: scan git history, not just the working tree about 10 hours ago

enhancement help wanted

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

A baseline file, so these can be adopted on an existing repo about 10 hours ago

enhancement help wanted

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

SARIF output so findings land in the GitHub Security tab about 10 hours ago

enhancement help wanted

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

Exit codes are documented as consistent but differ across skills 18 days ago

bug help wanted

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

prompt-injection-tester: add unicode-obfuscation and multi-turn payloads 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

New skill: audit GitHub Actions workflows 18 days ago

enhancement help wanted

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

dockerfile-scan: flag a missing HEALTHCHECK and a left-behind package cache 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

dependency-check: parse go.mod 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: add rules for Hugging Face, Replicate, Cohere and Groq keys 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

docs: record a terminal demo for the README 18 days ago

documentation good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

dependency-check: grow the bundled advisory database 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

jwt-inspector: detect jku, x5u and path-like kid header injection 18 days ago

good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

http-sec-audit: flag a missing Cache-Control directive 18 days ago

good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

http-sec-audit: add COOP/COEP/CORP checks 18 days ago

good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

sast-lite: detect XXE-prone XML parsing 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

sast-lite: flag the random module used for security 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: add a DigitalOcean PAT rule 18 days ago

help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

prompt-injection-tester: add 2 new injection payloads 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

dependency-check: add 3 well-known advisories 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: add an npm access token rule 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: add a GitLab Personal Access Token rule 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: skip more build/cache directories 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

docs: add a terminal demo (GIF / asciinema) 4 months ago

documentation enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: skip more binary file types 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

secret-scanner: reduce false positives by adding placeholder words 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

jwt-inspector: add more common weak secrets to the crack wordlist 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

docs: translate the README 4 months ago

documentation enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] prompt-injection-tester: add a new payload category 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] dependency-check: parse pyproject.toml dependencies 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] http-sec-audit: add COOP/COEP/CORP checks 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] dependency-check: grow the bundled advisory DB 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] jwt-inspector: flag jku/x5u/kid injection vectors 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] http-sec-audit: add Cache-Control advisory check 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] sast-lite: detect XXE-prone XML parsing 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] sast-lite: flag random module used for security 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] secret-scanner: add Mailgun & Postmark key patterns 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis

[FEATURE] secret-scanner: add DigitalOcean PAT rule 4 months ago

enhancement help wanted good first issue

NovaCode37/claude-security-skills

11

Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Standard library only, no runtime dependencies.

Python

#ai-security#anthropic#appsec#claude#claude-code#claude-plugin#claude-skills#cybersecurity#devsecops#jwt#llm-security#prompt-injection#python#red-team#sast#secret-scanning#secrets-detection#security-scanner#security-tools#static-analysis