Agent skill · security · anthropics
claude-security
The Claude Security menu — pick a job: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose).
Why this skill is useful
Adds executable scripts for automated codebase scanning and patch generation that are not commonly available in public documentation.
What it needs
Requires python3 installed locally. About 3k tokens when loaded. Last updated 2026-08-07. 33,212 stars on the source repository.
What this skill does
Claude Security Session start time (UTC): !date -u +%Y%m%d-%H%M%S The front-desk menu This is the front desk. Its whole purpose is to work out which job the user wants and drive it, following that job's recipe. 1. If the user already asked for a specific job — in the arguments ($ARGUMENTS) or in plain text ("scan this repo", "scan my branch", "fix the findings", a bare commit sha) — do that job directly and skip the menu. The recipe still asks its own single follow-up question wherever the request left one open. 2. Otherwise, open with the menu. Call AskUserQuestion once, single select, header: "Job", question: "What would you like to do?", offering exactly these three options (never invent others — the tool adds its own free-text entry). The menu is your first user-visible act; no text of any kind comes before it. Offer these three options: 1. Scan codebase 2. Scan changes 3. Suggest patches "Scan codebase" is the recommended pick — it carries " (Recommended)" and goes first; the other two keep this order. 3. Then note auto mode once, and Read the chosen job's recipe and follow it. As soon as the job is known — picked on the menu, or named directly in step 1 — first emit exactly one fixed plain-text line, worded identically every time: "Claude Security works best in auto mode. To enable it, press Shift+Tab until the status bar shows auto mode, or restart with claude --permission-mode auto." It is a note, not a question — say it once, never reword or size it, and do not diagnose the user's settings (whether auto mode is available to them is not yours to determine). Then read the recipe: every recipe opens with its own one-question sub-menu — which kind of scan, or which patch mode — built from the repository's real state, and every sub-menu has an "I don't know" choice that the recipe resolves to a sensible default itself. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills anthropics/claude-security