Security mistakes often appear in common areas like authentication, authorization, input handling, and data exposure. This skill gives Claude, Codex, and Claude Code a focused checklist for finding those risks during review.

Public websites can expose weak headers, secrets, source maps, and deployment mistakes. This skill guides an authorized Check My Vibe scan and converts evidence into prioritized fixes.

Missing or weak browser headers expose web apps to common client-side attacks. This skill audits headers and gives implementation guidance for safer deployments.

Leaked credentials can give attackers access to cloud accounts, databases, and payment systems. This skill helps Claude, Codex, and Claude Code find likely secrets and produce clear remediation steps.

Dependency vulnerabilities create release risk and supply chain exposure. This skill helps Claude, Codex, and Claude Code review packages and plan fixes.

Security teams need clear checks against many standards without rewriting each checklist. This skill guides Claude, Codex, and Claude Code through structured compliance reviews and gap reports.

Authentication and authorization bugs can expose accounts, sessions, and private data. This skill guides Claude, Codex, and Claude Code through focused auth reviews with clear remediation advice.

Dependency risks are hard to prioritize across package managers and license rules. This skill guides Claude, Codex, and Claude Code through practical audits with clear remediation steps.

Security reviews are slow when dependency, container, and IaC data are spread across a repository. This skill inventories assets, checks OSV.dev, and drafts prioritized remediation reports.

Bot protection often fails when frontend widgets and server checks are configured separately. This skill coordinates creation, integration, secret handling, and validation.

Legacy security policies often lack direct Cloudflare One equivalents. This skill builds an accountable migration map, staged rollout, validation plan, and rollback path.

Security reviews can miss important controls across applications, infrastructure, and supply chains. This skill provides framework-based checklists and a consistent finding format for focused reviews.

AIR designs can contain subtle unconstrained states, selector gaps, and degree errors. This skill guides structured reviews that connect each protocol claim to enforceable constraints.

Finding the correct login item is difficult when item titles do not match website names. This skill searches saved 1Password URLs and can filter results by username.

React teams need secure authentication flows that handle sessions, redirects, OAuth, and token refresh correctly. This skill gives Claude, Codex, and Claude Code practical patterns for building those flows in web apps.

Expo apps often hide broken API flows, unsafe token handling, and stale screen data. This skill guides Claude, Codex, or Claude Code through a structured API audit.

Security teams need structured ways to inventory authorized targets. This skill organizes reconnaissance phases, evidence capture, and reporting for controlled assessments.

Linux privilege escalation reviews require careful enumeration and strict authorization. This skill organizes common checks, risky vectors, and evidence capture for controlled labs and defensive audits.

Security teams need a structured way to review exploit workflows and understand operational risk. This skill organizes exploitation methods, payload choices, and post-access checks for controlled lab or audit review.

Penetration testing labs require careful state tracking across reconnaissance, exploitation, and privilege escalation. This skill coordinates an authorized lab workflow with structured notes, attempts, and completion criteria.