Claude Skills by ch0ks

Full security code review with Semgrep Pro scan, taint analysis, CWE mapping, OWASP Top 10 coverage, and generation of a formal Security Code Review Report saved to /security-review/ in the repository root. Use when reviewing code for vulnerabilities, auditing a file for security issues, or before merging security-sensitive changes.

Triage security findings from Semgrep Pro and Claude security-code-review using IaC files as deployment context (Terraform, Kubernetes, Docker Compose, CloudFormation, Azure Pipelines). Detects whichever IaC files are present, extracts deployment facts, scores each finding with CVSS 4.0 with per-vector justification grounded in those facts, updates each individual FINDING-NNN block in Section 4 to reflect whether risk was increased or decreased vs. the original assessment (with a reference to...

Reads the most recent security-code-review report, generates minimal remediation patches for each finding using the Vibe Security Patching methodology, commits each patch with a conventional commit message referencing the finding and Semgrep rule ID, writes a formal Security Vibe Patch Report to /security-review/security-vibe-patch-report-YYYYMMDD.md (same metadata format as the code review report) with an executive summary, per-finding patch detail, skip rationale, and risk reduction analysi...