Аудит безопасности кода по OWASP

★ 6.6 · security

code-vuln-audit is a Claude Code skill that scans a codebase for security issues across three areas: dependency vulnerabilities, secret leaks, and OWASP anti-patterns. The dependency module auto-detects project type and runs npm audit for Node.js or pip-audit for Python projects. Secret detection combines regex matching for known formats — AWS access keys, GitHub tokens, JWT, private keys, credentials in URLs — with Shannon entropy analysis to catch secrets in non-standard forms. The OWASP module statically identifies SQL injection, XSS, command injection, insecure deserialization, SSRF, weak ciphers, and security misconfigurations mapped to OWASP Top 10 categories. Results can be filtered by severity level (low/medium/high/critical), output as text or JSON, and the scanner supports Python, JavaScript/TypeScript, Java, PHP, Ruby, Go, and more.