Cloudflare Security Audit
Coding Workflows
A step-by-step security audit of your code where every finding gets double-checked.
Coding Workflows
Security Guidance
Warns about security mistakes as Claude writes code, then checks every commit.
FreeOpen sourceBy Anthropic
View source What is it?
Once installed it works in the background in three layers. As Claude edits a file, it warns about around 25 known risky patterns, such as passwords typed straight into code. When Claude finishes a turn, a quick review of the changes sends any serious problems back so Claude fixes them before you see the result. When you commit (save a checkpoint of your code), a deeper reviewer traces how data moves across files to catch problems that only show up between files.
It covers common website weaknesses: code injection, cross-site scripting, leaked secrets, broken login checks and more. Claude Code also has a built-in /security-review you run on demand. This one runs every time without you asking.
The extra reviews run on Claude Opus, so they use some of your plan's usage. Each layer can be switched off if you only want the free pattern warnings.
Install in Claude Code
You need Python 3 installed. In Claude Code run /plugin install security-guidance@claude-plugins-official and choose user scope so it works in every project. There's nothing to run after that; it checks Claude's work automatically.
Try this prompt
Paste into Claude Code
Add a contact form to my site that saves messages to the database and emails me a copy.Who it's for
Anyone building a site, app or tool with Claude Code that handles logins, payments or customer data.
Best for
- Forms that save customer data
- Login and payment code
- Stopping secrets ending up in code
- A safety net for beginners
Why it made the list
It catches security mistakes while they're being written, which is far cheaper than finding them after launch.
More skills like this
Code Review
Coding Workflows
Several review agents check a pull request and only report problems they're sure about.
Hookify
Coding Workflows
Turns "never do that again" into a rule Claude Code checks before every action.
PR Review Toolkit
Coding Workflows
Six specialist reviewers for comments, tests, error handling, types and tidier code.