/ Verzeichnis / Playground / Claude Code Security Review
← Alle Server ↗ GitHub
● Offiziell anthropics ⚡ Sofort

Claude Code Security Review

von anthropics · anthropics/claude-code-security-review

Official Anthropic GitHub Action — uses Claude to scan PR diffs for SQL injection, XSS, auth flaws, and unsafe dependency usage.

Claude Code Security Review is a Claude skill maintained by anthropics. Official Anthropic GitHub Action — uses Claude to scan PR diffs for SQL injection, XSS, auth flaws, and unsafe dependency usage. See README for installation and configuration: https://github.com/anthropics/claude-code-security-review

▶ Demo ansehen 📦 Installieren 💡 Anwendungsfälle

Warum nutzen

Hauptfunktionen

Live-Demo

In der Praxis

claude-code-security-review.replay ▶ bereit
0/0

Installation

Repository des Autors · Offizielle Dokumentation zu Claude Skills

Anwendungsfälle

Praxisnahe Nutzung: Claude Code Security Review

Use Claude Code Security Review for its primary workflow

👤 Claude Code users ⏱ ~20 min intermediate

Wann einsetzen: See repo README for canonical use cases.

Voraussetzungen
  • Repo cloned or installed — See https://github.com/anthropics/claude-code-security-review
Ablauf
  1. Install
    Install Claude Code Security Review per README.✓ Kopiert
    → Tool registered with client
  2. Configure
    Provide credentials/config as instructed.✓ Kopiert
    → Successful auth/init
  3. Use
    Run a sample task with Claude Code Security Review.✓ Kopiert
    → Expected output

Ergebnis: You can drive the documented workflow end-to-end.

Fallstricke
  • Skipping README — Read the repo README and CHANGELOG before shipping to prod.

Werkzeuge

Was dieses MCP bereitstellt

WerkzeugEingabenWann aufrufenKosten
primary see README Primary action free

Kosten & Limits

Was der Betrieb kostet

API-Kontingent
None of its own; bounded by upstream provider quotas if any
Tokens pro Aufruf
Depends on usage
Kosten in €
Open source — check repo LICENSE
Tipp
Review upstream API costs (if any) before automating.

Sicherheit

Rechte, Secrets, Reichweite

Minimale Scopes: Whatever the upstream provider requires
Credential-Speicherung: Env vars or local config — never commit secrets
Datenabfluss: Forwards data per its README
Niemals gewähren: Full admin to untrusted prompts

Fehlerbehebung

Häufige Fehler und Lösungen

Auth fails

Verify credentials and required scopes match README.

Prüfen: Re-read repo README auth section.
Tool not found by client

Ensure MCP client config points to correct command/path.

Prüfen: Restart the client after editing config.

Mehr

Ressourcen

📖 Offizielle README auf GitHub lesen

🐙 Offene Issues ansehen

🔍 Alle 400+ MCP-Server und Skills durchsuchen