web-security-posture-stinger
From the author
External, passive security-posture audit: headers, TLS coarse-check, cookies, CSP, injection surface, payment-path integrity. Highest-weighted category (20%); a critical leaf caps the grade at C.
Install
npx skills add legioncodeinc/vibe-coding-tools --skill web-security-posture-stinger -a claude-code
Installs to .claude/skills/web-security-posture-stinger/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (AGPL-3.0) does not let us redistribute its files. The install commands fetch them from GitHub instead.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
No warnings.
Why 81
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- http-rest-fundamentals-stingerlegioncodeinc/vibe-coding-toolsAudit HTTP and REST behavior. Use for methods, status codes, headers, caching, CORS, conditional requests, or API semantics. Read README.md for the guide map.Engineering★ 94
- status-page-stingerlegioncodeinc/vibe-coding-toolsPublic status page specialist: platform selection, incident communication templates, subscriber notifications, compliance. Use when setting up or auditing a status page.Legal★ 94
- CSP Security TestingPramodDutta/qaskillsContent Security Policy testing and validation to prevent XSS attacks, data injection, and clickjacking through proper CSP header configuration.Security★ 240
- application-securitytravisjneuman/.claudeOWASP Top 10 with code examples, SAST/DAST tools, dependency scanning, CSP headers, and input validation patterns. Use when hardening applications, reviewing security posture, or implementing defensive coding practices.Security★ 106
- security-auditstaruhub/ClaudeSkills全面的代码安全检查和服务器安全审计skill。适用于：(1) 代码漏洞扫描 - 检测SQL注入、XSS、SSRF等OWASP Top 10漏洞，(2) 依赖安全检查 - 识别过时或有漏洞的第三方库，结合实时搜索确认最新CVE，(3) 服务器配置审计 - 检查SSH、防火墙、权限等安全配置，(4) 敏感信息泄露检测 - API密钥、密码、令牌等硬编码检测，(5) 容器安全扫描 - Docker镜像和Kubernetes配置审计，(6) CI/CD安全检查。触发关键词："安全检查"、"漏洞扫描"、"代码审计"、"security audit"、"vulnerability scan"、"SAST"、"dependency check"、"CVE检测"等。不用于：修复单个已定位的bug、编写新的安全功能代码、对无授权的第三方系统做扫描或渗透测试。Security★ 732
- accessibility-audit-stingerlegioncodeinc/vibe-coding-toolsAutomated-plus-heuristic WCAG 2.1 AA audit across crawled site-data/, a 0-100% score and AA/AAA-style rating, every finding cited with evidence. Not a legal EAA-conformance determination.Browser★ 94
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in