Agent Skills › nicknisi/claude-plugins › security-audit

security-audit

GitHub

在用户明确要求时，调度 security-auditor 代理对当前分支与 main 的差异进行深度安全漏洞审计。该技能不自动触发，需显式调用。

plugins/essentials/skills/security-audit/SKILL.md nicknisi/claude-plugins

Trigger Scenarios

用户明确要求进行安全审计用户请求检查分支变更中的漏洞

Install

npx skills add nicknisi/claude-plugins --skill security-audit -g -y

More Options

Non-standard path

npx skills add https://github.com/nicknisi/claude-plugins/tree/main/plugins/essentials/skills/security-audit -g -y

Use without installing

npx skills use nicknisi/claude-plugins@security-audit

指定 Agent (Claude Code)

npx skills add nicknisi/claude-plugins --skill security-audit -a claude-code -g -y

安装 repo 全部 skill

npx skills add nicknisi/claude-plugins --all -g -y

预览 repo 内 skill

npx skills add nicknisi/claude-plugins --list

SKILL.md

Frontmatter

{
    "name": "security-audit",
    "description": "Dispatch the security-auditor agent on the current branch diff with pre-gathered context. User-invocable only — does not auto-trigger on ambiguous phrasing. Use when you explicitly want a deep vulnerability audit of branch changes.",
    "disable-model-invocation": true
}

Security Audit

Launches the security-auditor agent (from this plugin) with pre-loaded branch context, so the agent does not have to assemble scope itself.

Pre-gathered Context

Current branch: !git rev-parse --abbrev-ref HEAD
Diff summary vs main: !git diff main...HEAD --stat
Commits on branch: !git log main..HEAD --oneline
PR metadata (if open): !gh pr view --json title,body,comments 2>/dev/null || echo "no open PR for this branch"