Security audit
Security checks for vulnerabilities and agentic risk
This package is a low-risk Claude Code guide/template bundle, though it appears incomplete compared with its advertised contents.
Installers should treat this as a small prompt/template bundle, not the full advertised course: several promised deliverables are missing. From a security perspective, it does not execute code or request sensitive access; review any future added MCP setup scripts before running them.
The provided manifest context says the skill is 'Claude Code Mastery' and describes a guide to mastering the Claude Code CLI, but this file defines a skill named 'Security Audit' whose command performs vulnerability analysis on shared code. That is a direct semantic mismatch between the claimed skill purpose and the actual skill behavior defined here.
This manifest describes the skill in very general terms ('Check code for security vulnerabilities' and 'Perform a security audit on the code I've shared') without any explicit trigger phrases, scope boundaries, or exclusion conditions. In a manifest file, this kind of broad invocation description can overlap with many ordinary requests about code review or analysis, increasing the chance of unintended activation.
