By sam-dumont
Audit Python code for vulnerabilities by combining static scans from Bandit, pip-audit, Safety, Ruff S-rules, and detect-secrets with LLM-powered analysis detecting logic flaws, auth bypasses, race conditions, injections, path traversal, and secrets exposure.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub sam-dumont/claude-skills --plugin code-securityApply Sam Dumont's personal writing voice and style when drafting any written content. Works in English and French.
Process skill for turning raw project data (research notes, session logs, drafts, code) into structured technical blog posts. Covers gathering, extraction, structure, and Astro frontmatter.
Research whether a metal band has ties to far-right, NSBM, or fascist movements. Uses parallel research agents with tiered verdicts for both historical and current status.
Reframes tasks as measurable outcomes using o16g principles. Adds outcome specification, execution guardrails, and validation to any workflow.
Comprehensive Python code quality skill. Sets up and runs ruff (lint + format), mypy (type checking), xenon (cyclomatic complexity), vulture (dead code), file-length gates, and pre-commit hooks. Provides a full Makefile-based workflow using uv for fast package management.
Comprehensive Python code quality skill. Sets up and runs ruff (lint + format), mypy (type checking), xenon (cyclomatic complexity), vulture (dead code), file-length gates, and pre-commit hooks. Provides a full Makefile-based workflow using uv for fast package management.
Automated OWASP security checks — Web Top 10:2025, LLM Top 10:2025, API Security Top 10:2023
Specialized security review subagent
Modern Python best practices. Use when creating new Python projects, and writing Python scripts, or migrating existing projects from legacy tools.
AI-powered cybersecurity code review with 8 specialist agents, OWASP Top 10:2021, CWE Top 25:2024, MITRE ATT&CK v15, and framework-aware false-positive suppression
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks. Originally from OpenAI's curated skills catalog.