Code Security

# claude-code-security-skill installer for Windows
# Run: powershell -ExecutionPolicy Bypass -File install.ps1

$ErrorActionPreference = "Stop"

$SKILL_DIR = "$env:USERPROFILE\.claude\skills\code-security"
$SCRIPT_DIR = Split-Path -Parent $MyInvocation.MyCommand.Path

Write-Host ""
Write-Host "==================================" -ForegroundColor Cyan
Write-Host "  Claude Code Security Skill"
Write-Host "  One-Click Installer (Windows)"
Write-Host "==================================" -ForegroundColor Cyan
Write-Host ""

# Step 1: Check Python
Write-Host "[1/4] Checking Python..." -ForegroundColor Yellow
$pyCmd = $null
try {
    $pyVer = & python --version 2>&1
    if ($pyVer -match "Python") {
        $pyCmd = "python"
        Write-Host "  OK $pyVer" -ForegroundColor Green
    }
} catch {}

if (-not $pyCmd) {
    try {
        $pyVer = & python3 --version 2>&1
        if ($pyVer -match "Python") {
            $pyCmd = "python3"
            Write-Host "  OK $pyVer" -ForegroundColor Green
        }
    } catch {}
}

if (-not $pyCmd) {
    Write-Host "  FAIL Python not found" -ForegroundColor Red
    Write-Host ""
    Write-Host "  Please install Python 3.8+ first:"
    Write-Host "  https://www.python.org/downloads/"
    exit 1
}

# Step 2: Check/Install Semgrep
Write-Host "[2/4] Checking Semgrep..." -ForegroundColor Yellow
$sgInstalled = $false
try {
    $sgVer = & semgrep --version 2>&1
    if ($LASTEXITCODE -eq 0) {
        $sgInstalled = $true
        Write-Host "  OK Semgrep $sgVer" -ForegroundColor Green
    }
} catch {}

if (-not $sgInstalled) {
    Write-Host "  NOT FOUND Installing Semgrep..." -ForegroundColor Yellow
    & $pyCmd -m pip install semgrep --quiet
    try {
        $sgVer = & semgrep --version 2>&1
        if ($LASTEXITCODE -eq 0) {
            Write-Host "  OK Semgrep $sgVer installed" -ForegroundColor Green
        } else {
            throw "Install failed"
        }
    } catch {
        Write-Host "  FAIL Semgrep installation failed" -ForegroundColor Red
        Write-Host ""
        Write-Host "  Try manually: pip install semgrep"
        Write-Host "  Then add Python Scripts folder to PATH"
        exit 1
    }
}

# Step 3: Install Skill
Write-Host "[3/4] Installing Skill..." -ForegroundColor Yellow
$skillFile = Join-Path $SCRIPT_DIR "SKILL.md"
if (-not (Test-Path $skillFile)) {
    Write-Host "  FAIL SKILL.md not found in $SCRIPT_DIR" -ForegroundColor Red
    exit 1
}

if (-not (Test-Path $SKILL_DIR)) {
    New-Item -ItemType Directory -Path $SKILL_DIR -Force | Out-Null
}
Copy-Item $skillFile -Destination (Join-Path $SKILL_DIR "SKILL.md") -Force
Write-Host "  OK Copied to $SKILL_DIR\SKILL.md" -ForegroundColor Green

# Step 4: Verify
Write-Host "[4/4] Verifying..." -ForegroundColor Yellow
if (Test-Path (Join-Path $SKILL_DIR "SKILL.md")) {
    Write-Host "  OK Skill file exists" -ForegroundColor Green
} else {
    Write-Host "  FAIL Skill file not found after copy" -ForegroundColor Red
    exit 1
}

Write-Host ""
Write-Host "==================================" -ForegroundColor Cyan
Write-Host "  Installation Complete!" -ForegroundColor Green
Write-Host "==================================" -ForegroundColor Cyan
Write-Host ""
Write-Host "  Skill location: $SKILL_DIR\SKILL.md"
Write-Host "  Hot Reloading: No restart needed"
Write-Host ""
Write-Host "  Usage in Claude Code:"
Write-Host "    - Say: 安全扫描一下这个项目"
Write-Host "    - Say: 扫一下有没有漏洞"
Write-Host "    - Or:  /code-security"
Write-Host ""

#!/usr/bin/env bash
# claude-code-security-skill installer
# One command to install Semgrep + Claude Code Skill

set -e

GREEN='\033[0;32m'
RED='\033[0;31m'
YELLOW='\033[1;33m'
NC='\033[0m'

SKILL_DIR="$HOME/.claude/skills/code-security"
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"

echo ""
echo "=================================="
echo "  Claude Code Security Skill"
echo "  One-Click Installer"
echo "=================================="
echo ""

# Step 1: Check Python
echo -e "${YELLOW}[1/4]${NC} Checking Python..."
if command -v python3 &>/dev/null; then
    PY_CMD="python3"
    PY_VER=$($PY_CMD --version 2>&1)
    echo -e "  ${GREEN}OK${NC} $PY_VER"
elif command -v python &>/dev/null; then
    PY_CMD="python"
    PY_VER=$($PY_CMD --version 2>&1)
    echo -e "  ${GREEN}OK${NC} $PY_VER"
else
    echo -e "  ${RED}FAIL${NC} Python not found"
    echo ""
    echo "  Please install Python 3.8+ first:"
    echo "  https://www.python.org/downloads/"
    exit 1
fi

# Step 2: Check/Install Semgrep
echo -e "${YELLOW}[2/4]${NC} Checking Semgrep..."
if command -v semgrep &>/dev/null; then
    SG_VER=$(semgrep --version 2>&1)
    echo -e "  ${GREEN}OK${NC} Semgrep $SG_VER"
else
    echo -e "  ${YELLOW}NOT FOUND${NC} Installing Semgrep..."
    $PY_CMD -m pip install semgrep --quiet
    if command -v semgrep &>/dev/null; then
        SG_VER=$(semgrep --version 2>&1)
        echo -e "  ${GREEN}OK${NC} Semgrep $SG_VER installed"
    else
        echo -e "  ${RED}FAIL${NC} Semgrep installation failed"
        echo ""
        echo "  Try manually: pip install semgrep"
        echo "  If 'command not found', add Python Scripts to PATH"
        exit 1
    fi
fi

# Step 3: Install Skill
echo -e "${YELLOW}[3/4]${NC} Installing Skill..."
if [ ! -f "$SCRIPT_DIR/SKILL.md" ]; then
    echo -e "  ${RED}FAIL${NC} SKILL.md not found in $SCRIPT_DIR"
    exit 1
fi

mkdir -p "$SKILL_DIR"
cp "$SCRIPT_DIR/SKILL.md" "$SKILL_DIR/SKILL.md"
echo -e "  ${GREEN}OK${NC} Copied to $SKILL_DIR/SKILL.md"

# Step 4: Verify
echo -e "${YELLOW}[4/4]${NC} Verifying..."
if [ -f "$SKILL_DIR/SKILL.md" ]; then
    echo -e "  ${GREEN}OK${NC} Skill file exists"
else
    echo -e "  ${RED}FAIL${NC} Skill file not found after copy"
    exit 1
fi

echo ""
echo "=================================="
echo -e "  ${GREEN}Installation Complete!${NC}"
echo "=================================="
echo ""
echo "  Skill location: $SKILL_DIR/SKILL.md"
echo "  Hot Reloading: No restart needed"
echo ""
echo "  Usage in Claude Code:"
echo "    - Say: 安全扫描一下这个项目"
echo "    - Say: 扫一下有没有漏洞"
echo "    - Or:  /code-security"
echo ""

MIT License

Copyright (c) 2026

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.