Skills security-sentinel
📦

security-sentinel

Content revision r1 Safe ⚙️ External commands🌐 Network access🔑 Env variables⚡ Contains scripts📁 Filesystem access

Audit Code for Security Risks

Security-sensitive code is easy to ship with hidden flaws in authentication, input handling, and secrets. This skill gives Claude, Codex, and Claude Code structured security references and scanner guidance for safer reviews.

Supports: Claude Codex Code(CC)
🥉 79 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "security-sentinel" from https://skillstore.io/skills/barnhardt-enterprises-inc-security-sentinel.md and its manifest at https://skillstore.io/api/skills/barnhardt-enterprises-inc-security-sentinel/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/barnhardt-enterprises-inc-security-sentinel.md Signed manifest GET /api/skills/barnhardt-enterprises-inc-security-sentinel/manifest Signed lockfile GET /api/skills/barnhardt-enterprises-inc-security-sentinel/lockfile

Test it

Using "security-sentinel". Review this password reset route for security issues.

Expected outcome:

  • Finding: The reset token is not rate limited, which allows repeated guessing attempts.
  • Fix: Add per-user and per-IP limits, then return a generic response for all reset requests.
  • Priority: High because this protects account recovery.

Using "security-sentinel". Audit this API route before deployment.

Expected outcome:

  • The route validates the request body and uses parameterized database access.
  • Missing control: It does not verify resource ownership before returning the record.
  • Recommended next step: Add an owner check tied to the authenticated user.

Using "security-sentinel". Summarize security readiness for this pull request.

Expected outcome:

The review found one high-priority authorization gap and two medium-priority hardening items. Resolve the owner check before merge, then schedule the remaining logging and rate-limit improvements.

Security Audit

Safe
v10 • 7/9/2026 Open versioned report

The static analyzer flagged many dangerous strings, but review shows they are OWASP reference examples, checklist items, or scanner detection rules. I found no evidence that the skill attempts hidden command execution, credential theft, network exfiltration, prompt injection, or destructive behavior. Static review was capped at 400/639 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

12
Files scanned
10,481
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (50)
authentication-patterns.md:547-552 authentication-patterns.md:558-611 authentication-patterns.md:652-657 authentication-patterns.md:662-695 authentication-patterns.md:722-880 authentication-patterns.md:1002-1013 authentication-patterns.md:1013-1050 authentication-patterns.md:1050-1111 authentication-patterns.md:1124-1200 authentication-patterns.md:1249-1254 authentication-patterns.md:1259-1294 authorization-patterns.md:332-359 authorization-patterns.md:695-713 input-validation-complete.md:731-736 input-validation-complete.md:819-827 owasp-top-10-complete.md:550 owasp-top-10-complete.md:572 owasp-top-10-complete.md:590 owasp-top-10-complete.md:554 owasp-top-10-complete.md:204-208 owasp-top-10-complete.md:348-369 owasp-top-10-complete.md:455-458 owasp-top-10-complete.md:505 owasp-top-10-complete.md:506 owasp-top-10-complete.md:520-527 owasp-top-10-complete.md:527-544 owasp-top-10-complete.md:554-558 owasp-top-10-complete.md:587-599 owasp-top-10-complete.md:599-614 owasp-top-10-complete.md:614-620 owasp-top-10-complete.md:849-935 owasp-top-10-complete.md:1463-1472 owasp-top-10-complete.md:2061-2070 rate-limiting-patterns.md:284 rate-limiting-patterns.md:209-229 rate-limiting-patterns.md:229-248 rate-limiting-patterns.md:266-279 rate-limiting-patterns.md:279-296 rate-limiting-patterns.md:394-400 rate-limiting-patterns.md:476-492 rate-limiting-patterns.md:518-534 rate-limiting-patterns.md:579-581 rate-limiting-patterns.md:766-769 rate-limiting-patterns.md:769-807 secret-management.md:441 secret-management.md:377 security-checklist.md:124 SKILL.md:192 SKILL.md:156-168 SKILL.md:168-177
🌐 Network access (50)
authentication-patterns.md:1018 authentication-patterns.md:1048 authentication-patterns.md:1013 authentication-patterns.md:1018 authentication-patterns.md:1048 authentication-patterns.md:1132 authentication-patterns.md:1133 authorization-patterns.md:319 csrf-prevention.md:227 csrf-prevention.md:235 csrf-prevention.md:327 csrf-prevention.md:30 input-validation-complete.md:731 input-validation-complete.md:731 owasp-top-10-complete.md:346 owasp-top-10-complete.md:1021 owasp-top-10-complete.md:1027 owasp-top-10-complete.md:1847 owasp-top-10-complete.md:1936 owasp-top-10-complete.md:1147 owasp-top-10-complete.md:1190 owasp-top-10-complete.md:764 owasp-top-10-complete.md:1862 owasp-top-10-complete.md:2021 owasp-top-10-complete.md:36 owasp-top-10-complete.md:37 owasp-top-10-complete.md:143 owasp-top-10-complete.md:144 owasp-top-10-complete.md:320 owasp-top-10-complete.md:346 owasp-top-10-complete.md:734 owasp-top-10-complete.md:1021 owasp-top-10-complete.md:1027 owasp-top-10-complete.md:1039 owasp-top-10-complete.md:1040 owasp-top-10-complete.md:1041 owasp-top-10-complete.md:1106 owasp-top-10-complete.md:1107 owasp-top-10-complete.md:1108 owasp-top-10-complete.md:1110 owasp-top-10-complete.md:1424 owasp-top-10-complete.md:1428 owasp-top-10-complete.md:1433 owasp-top-10-complete.md:1498 owasp-top-10-complete.md:1857 owasp-top-10-complete.md:1858 owasp-top-10-complete.md:1861 owasp-top-10-complete.md:1862 owasp-top-10-complete.md:1866 owasp-top-10-complete.md:1867
🔑 Env variables (50)
authentication-patterns.md:29 authentication-patterns.md:90 authentication-patterns.md:338 authentication-patterns.md:417 authentication-patterns.md:547 authentication-patterns.md:652 authentication-patterns.md:1000 authentication-patterns.md:1001 authentication-patterns.md:1002 authentication-patterns.md:1122 authentication-patterns.md:1123 authentication-patterns.md:1124 authentication-patterns.md:1249 authentication-patterns.md:1306 authentication-patterns.md:1387 authentication-patterns.md:29 authentication-patterns.md:90 authentication-patterns.md:338 authentication-patterns.md:417 authentication-patterns.md:547 authentication-patterns.md:652 authentication-patterns.md:1000 authentication-patterns.md:1001 authentication-patterns.md:1002 authentication-patterns.md:1122 authentication-patterns.md:1123 authentication-patterns.md:1124 authentication-patterns.md:1249 authentication-patterns.md:1306 authentication-patterns.md:1387 authentication-patterns.md:28 authentication-patterns.md:50 authentication-patterns.md:58 csrf-prevention.md:101 csrf-prevention.md:110 csrf-prevention.md:143 csrf-prevention.md:289 csrf-prevention.md:503 csrf-prevention.md:101 csrf-prevention.md:110 csrf-prevention.md:143 csrf-prevention.md:289 csrf-prevention.md:503 owasp-top-10-complete.md:332 owasp-top-10-complete.md:333 owasp-top-10-complete.md:334 owasp-top-10-complete.md:344 owasp-top-10-complete.md:398 owasp-top-10-complete.md:421 owasp-top-10-complete.md:989
⚡ Contains scripts (32)
owasp-top-10-complete.md:2090 owasp-top-10-complete.md:2090 owasp-top-10-complete.md:554 rate-limiting-patterns.md:284 security-checklist.md:117 security-checklist.md:117 SKILL.md:133 SKILL.md:145 SKILL.md:464 SKILL.md:466 SKILL.md:612 SKILL.md:133 SKILL.md:145 SKILL.md:464 SKILL.md:612 SKILL.md:192 validate-security.py:159 validate-security.py:163 validate-security.py:159 validate-security.py:170 validate-security.py:201 validate-security.py:209 xss-prevention.md:137 xss-prevention.md:207 xss-prevention.md:212 xss-prevention.md:616 xss-prevention.md:207 xss-prevention.md:216 xss-prevention.md:616 xss-prevention.md:216 xss-prevention.md:59 xss-prevention.md:186
📁 Filesystem access (13)
owasp-top-10-complete.md:134 owasp-top-10-complete.md:199 owasp-top-10-complete.md:171 owasp-top-10-complete.md:172 owasp-top-10-complete.md:179 owasp-top-10-complete.md:132 owasp-top-10-complete.md:143 owasp-top-10-complete.md:144 owasp-top-10-complete.md:144 owasp-top-10-complete.md:563 SKILL.md:199 validate-security.py:40 validate-security.py:235
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: claude View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/barnhardt-enterprises-inc-security-sentinel/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/barnhardt-enterprises-inc-security-sentinel/security.svg)](https://skillstore.io/skills/barnhardt-enterprises-inc-security-sentinel?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/barnhardt-enterprises-inc-security-sentinel?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barnhardt-enterprises-inc-security-sentinel/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/barnhardt-enterprises-inc-security-sentinel.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

Barnhardt-Enterprises-Inc. (2026). security-sentinel security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barnhardt-enterprises-inc-security-sentinel/audits/10

BibTeX citation

@techreport{barnhardt-enterprises-inc-barnhardt-enterprises-inc-security-sentinel-2026, author = {Barnhardt-Enterprises-Inc}, title = {security-sentinel security audit report (audit version 10)}, institution = {Skillstore}, year = {2026}, number = {10}, url = {https://skillstore.io/skills/barnhardt-enterprises-inc-security-sentinel/audits/10}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "security-sentinel security audit report (audit version 10)" version: "unspecified" type: report authors: - name: "Barnhardt-Enterprises-Inc" date-released: "2026-07-09" url: "https://skillstore.io/skills/barnhardt-enterprises-inc-security-sentinel/audits/10" identifiers: - type: other value: "skillstore:barnhardt-enterprises-inc-security-sentinel:audit:10" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
82
Community
87
Spec Compliance

What You Can Build

Review an API route before release

Check input validation, authentication, authorization, rate limits, and error handling before deployment.

Harden an authentication flow

Compare password reset, JWT, session, OAuth, and MFA logic against secure implementation patterns.

Prepare a security checklist for a pull request

Use the bundled checklist to identify missing controls and summarize the remaining risks.

Try These Prompts

Check one file for obvious risks 
Use security-sentinel to review this file for authentication, input validation, secrets, and injection risks. Explain each issue in plain language.
Review an API change 
Use security-sentinel to audit the changed API routes. Focus on authorization, request validation, rate limiting, and unsafe database access.
Assess authentication design 
Use security-sentinel to review this authentication flow. Check token lifetime, password handling, session cookies, reset links, and account enumeration.
Run a release security pass 
Use security-sentinel to perform a release security pass. Combine checklist review, scanner results, and manual analysis into prioritized findings.

Best Practices

  • Run the review on small, focused changes so findings stay actionable.
  • Treat scanner output as a starting point and verify each finding manually.
  • Review authentication, authorization, input validation, and secrets before deployment.

Avoid

  • Do not accept generated fixes without checking business authorization rules.
  • Do not paste real secrets, tokens, or customer data into prompts.
  • Do not treat a clean scanner run as proof that the application is secure.

Frequently Asked Questions

Does this skill run a full penetration test?
No. It supports code review and pattern-based checks, but it does not replace penetration testing.
Which projects fit this skill best?
It is best for web applications, especially JavaScript, TypeScript, React, Next.js, and API code.
Can it find secrets in source code?
It includes guidance and scanner patterns for hardcoded secrets, but users must verify results.
Can Claude Code use the bundled scanner?
Yes. Claude Code can run the local Python scanner when the user allows Bash commands.
Will it fix security issues automatically?
It can suggest fixes, but changes should be reviewed because security rules depend on application context.
Why are there many dangerous examples in the files?
The skill includes unsafe examples to teach what to avoid. They are reference content, not hidden execution paths.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/Barnhardt-Enterprises-Inc/quetrex-plugin/tree/main/templates/skills/security-sentinel

Ref

7db9b9f06e0ab79c575b58bc48c4d8dc9849f424

Maintenance freshness

7/18/2026

Usage

5 downloads · 976 views

File structure

📄 authentication-patterns.md

📄 authorization-patterns.md

📄 csrf-prevention.md

📄 input-validation-complete.md

📄 owasp-top-10-complete.md

📄 rate-limiting-patterns.md

📄 secret-management.md

📄 security-checklist.md

📄 SKILL.md

📄 sql-injection-prevention.md

📄 validate-security.py

📄 xss-prevention.md

More from Barnhardt-Enterprises-Inc

View all

Related Skills

View all