Skellorok Appsec Audit
- 2 repo stars
- Updated January 25, 2026
- skellorok/appsec-audit
skellorok-appsec-audit is a Claude Code plugin that runs comprehensive, wave-based application security audits using parallel expert personas.
About
skellorok-appsec-audit is a Claude Code plugin that brings structured application security auditing into your agent session. Catalog metadata describes comprehensive auditing with wave-based execution and parallel expert personas, aligned with a RAPTOR-style methodology so findings are explored in depth rather than as a single shallow pass. developers shipping web apps, APIs, or agent-backed products use it when they need an appsec-focused review without immediately hiring a consultancy. Install it during security hardening or pre-launch checks, point the agent at your codebase context, and treat output as audit guidance to verify and prioritize—not as a substitute for penetration testing or compliance sign-off.
- Application security auditing purpose-built for Claude Code
- Wave-based execution with parallel expert personas
- RAPTOR-oriented comprehensive audit methodology
- Community appsec plugin focused on auditing—not passive linting
Skellorok Appsec Audit by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
/plugin install skellorok-appsec-audit@skellorok/appsec-auditAdd your badge
Show developers this plugin is listed on Skillselion. Paste this into your README.
| repo stars | ★ 2 |
|---|---|
| Last updated | January 25, 2026 |
| Repository | skellorok/appsec-audit ↗ |
What it does
Run comprehensive, wave-based application security audits inside Claude Code before release or after major changes.
Who is it for?
Best when you're preparing a SaaS or API release and want Claude-driven appsec audits with methodology and parallel review personas.
Skip if: Skip if you only need dependency bumps, compliance paperwork, or a single lint rule without an audit workflow.
What you get
After registration, Claude Code can execute structured security auditing waves so you get prioritized appsec findings to fix before launch.
- Structured appsec audit output organized by audit waves
- Security-oriented findings suitable for triage and fix planning
- Repeatable auditing workflow inside Claude Code sessions
By the numbers
- pluginCount: 1
- repository stars: 2 (catalog snapshot)
- catalog description: Application security auditing for Claude Code
Recommended Plugins
1mangesh1 Hipaa GuardianAI agent skill for HIPAA compliance - PHI/PII detection, code scanning, audit reports, and remediation guidance6
Abossenbroek Abossenbroek Claude PluginsCustom Claude Code plugins by abossenbroek2
Agentsecops SecopsagentkitSecurity operations toolkit for AI coding agents.181
Agent Sh EnhancePlugin structure and tool use analyzer - validates plugin.json, MCP tools, and security patterns3
Altic Dev EnvaultLet agents safely manage env variables6
Auth0 Agent SkillsAuth0 Agent Skills40How it compares
Structured appsec audit plugin, not a generic code-review or productivity dotfiles bundle.
FAQ
Who is Skellorok Appsec Audit for?
It is for developers using Claude Code who need application security auditing with a comprehensive, wave-based expert methodology before or after shipping changes.
When should I use Skellorok Appsec Audit?
Use it during pre-launch security passes, after large auth or data-handling changes, or when you want parallel persona-driven appsec review in the agent.
How do I add Skellorok Appsec Audit to my agent?
Add the skellorok/appsec-audit plugin through Claude Code plugin registration, then invoke it with clear repo scope and threat assumptions so audit waves stay focused.