/ 目錄 / 演練場 / Claude Code Security Review
← 全部伺服器 ↗ GitHub
● 官方 anthropics ⚡ 即開即用

Claude Code Security Review

作者 anthropics · anthropics/claude-code-security-review

Official Anthropic GitHub Action — uses Claude to scan PR diffs for SQL injection, XSS, auth flaws, and unsafe dependency usage.

Claude Code Security Review is a Claude skill maintained by anthropics. Official Anthropic GitHub Action — uses Claude to scan PR diffs for SQL injection, XSS, auth flaws, and unsafe dependency usage. See README for installation and configuration: https://github.com/anthropics/claude-code-security-review

▶ 觀看演示 📦 安裝 💡 使用場景

為什麼要用

核心特性

即時演示

實際使用效果

claude-code-security-review.replay ▶ 就緒
0/0

安裝

作者儲存庫 · Claude Skills 官方文件

使用場景

實戰用法： Claude Code Security Review

Use Claude Code Security Review for its primary workflow

👤 Claude Code users ⏱ ~20 min intermediate

何時使用： See repo README for canonical use cases.

前置條件
  • Repo cloned or installed — See https://github.com/anthropics/claude-code-security-review
步驟
  1. Install
    Install Claude Code Security Review per README.✓ 已複製
    → Tool registered with client
  2. Configure
    Provide credentials/config as instructed.✓ 已複製
    → Successful auth/init
  3. Use
    Run a sample task with Claude Code Security Review.✓ 已複製
    → Expected output

結果： You can drive the documented workflow end-to-end.

注意事項
  • Skipping README — Read the repo README and CHANGELOG before shipping to prod.

工具

此 MCP 暴露的能力

工具輸入參數何時呼叫成本
primary see README Primary action free

成本與限制

運行它的成本

API 配額
None of its own; bounded by upstream provider quotas if any
每次呼叫 Token 數
Depends on usage
費用
Open source — check repo LICENSE
提示
Review upstream API costs (if any) before automating.

安全

權限、密鑰、影響範圍

最小權限： Whatever the upstream provider requires
憑證儲存： Env vars or local config — never commit secrets
資料出站： Forwards data per its README
切勿授予： Full admin to untrusted prompts

故障排查

常見錯誤與修復

Auth fails

Verify credentials and required scopes match README.

驗證： Re-read repo README auth section.
Tool not found by client

Ensure MCP client config points to correct command/path.

驗證： Restart the client after editing config.

更多

資源

📖 閱讀 GitHub 上的官方 README

🐙 查看未解決的 issue

🔍 瀏覽全部 400+ MCP 伺服器和 Skills