● Oficial
anthropics
⚡ Instantáneo
Claude Code Security Review
por anthropics · anthropics/claude-code-security-review
Official Anthropic GitHub Action — uses Claude to scan PR diffs for SQL injection, XSS, auth flaws, and unsafe dependency usage.
Claude Code Security Review is a Claude skill maintained by anthropics. Official Anthropic GitHub Action — uses Claude to scan PR diffs for SQL injection, XSS, auth flaws, and unsafe dependency usage. See README for installation and configuration: https://github.com/anthropics/claude-code-security-review
Por qué usarlo
Características clave
- Official Anthropic GitHub Action — uses Claude to scan PR diffs for SQL injection, XSS, auth flaws, and unsafe dependency usage.
- Language: Python
- 4577+ GitHub stars at verification time
- Official project
Demo en vivo
Cómo se ve en la práctica
claude-code-security-review.replay
▶ listo
Casos de uso
Usos del mundo real: Claude Code Security Review
Cuándo usarlo: See repo README for canonical use cases.
Requisitos previos
- Repo cloned or installed — See https://github.com/anthropics/claude-code-security-review
Flujo
-
Install
Install Claude Code Security Review per README.✓ Copiado
→ Tool registered with client
-
Configure
Provide credentials/config as instructed.✓ Copiado
→ Successful auth/init
-
Use
Run a sample task with Claude Code Security Review.✓ Copiado
→ Expected output
Resultado: You can drive the documented workflow end-to-end.
Errores comunes
- Skipping README — Read the repo README and CHANGELOG before shipping to prod.
Coste y límites
Lo que cuesta ejecutarlo
- Cuota de API
- None of its own; bounded by upstream provider quotas if any
- Tokens por llamada
- Depends on usage
- Monetario
- Open source — check repo LICENSE
- Consejo
- Review upstream API costs (if any) before automating.
Seguridad
Permisos, secretos, alcance
Ámbitos mínimos: Whatever the upstream provider requires
Almacenamiento de credenciales: Env vars or local config — never commit secrets
Salida de datos: Forwards data per its README
No conceder nunca: Full admin to untrusted prompts
- Project moves fast — pin a version in production.
Resolución de problemas
Errores comunes y soluciones
Auth fails
Verify credentials and required scopes match README.
Verificar: Re-read repo README auth section.
Tool not found by client
Ensure MCP client config points to correct command/path.
Verificar: Restart the client after editing config.