vskill
SkillsStudioOur approachDocs
Resources
WatchSubmitPublishersTrust centerQueueInsightsDesktop app
Login
vskill

Focused expertise. Inspectable evidence.

SkillsStudioWatchPublishersTrustDocsQueueSubmitInsightsGitHubnpmSpecWeave

MIT License

<< Back to skill
──claude-code-security-review — Security Report
Skillclaude-code-security-review
Publisherleonmelamud
Repositoryleonmelamud/claude-code-security-review →
OverallPASS

Scanned by vskill platform — 52 built-in patterns + 3 external SAST tools (semgrep, njsscan, trufflehog). Dependencies enriched with Socket.dev supply chain scores. Public Snyk and Socket.dev reports linked where available.

──Scanning Pipeline
Tier 1: Pattern Scanner (52 checks)
PASS100/100
Tier 2: LLM Analysis
PENDING
semgrep
PASS100/100e3414ae
njsscan
PASS100/100e3414ae
trufflehog
PASS100/1007341447
──Tier 1 Detail
VerdictPASS
Score100/100
Patterns52
Findings0
──External Intelligence

Not on npm — external intelligence is only available for skills published as npm packages.

──External SAST Detail
ProviderStatusScoreCriticalHighMediumLowDateCommitActions
semgrepPASS1000000May 22, 2026e3414aeView details →
njsscanPASS1000000
──Commit Integrity
SHAe3414ae →
Repositoryleonmelamud/claude-code-security-review →
May 22, 2026
e3414ae
View details →
trufflehogPASS1000000Sep 2, 20267341447View details →