Security check
A meta-repository for Claude Code users that includes workspace setup (skills, commands, hooks)
npx -y skills add Benkapner/claude-code-basecamp --skill security-checkAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 14 stars14 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.
SKILL.md
1.1 KB, as published. Nobody here has run it
Security Check Skill
Scan for credential leaks, insecure code patterns, and LLM security issues in Python data science projects.
When to Activate
- Before committing changes
- After modifying
.env,.gitignore, or config files - When adding new API integrations or credentials
- When reviewing code that handles tokens, keys, or passwords
- When code sends data to external LLM APIs (Gemini, OpenAI, etc.)
- Periodic security hygiene checks
Check Process
Read skills/scan-process.md for the full 6-step scan process with bash commands.
Pattern Reference
Read skills/pattern-tables.md for API key regex patterns, insecure Python code patterns, and LLM-specific security patterns with severity classifications.
Behavioral Rules
Read guidelines.md for severity classifications, remediation requirements, and escalation rules.