security-architect
Enhances security architecture with threat modeling, OWASP analysis, and modern API authentication for robust code and infrastructure security.
Install this skill
or
56/100
Security score
The security-architect skill was audited on May 12, 2026 and we found 8 security issues across 3 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 308
Direct command execution function call
SourceSKILL.md
| 308 | exec(`git commit -m "${userMessage}"`); |
high line 312
Direct command execution function call
SourceSKILL.md
| 312 | spawn('git', ['commit', '-m', userMessage], { shell: false }); |
medium line 290
Template literal with variable interpolation in command context
SourceSKILL.md
| 290 | const query = `SELECT * FROM users WHERE id = ${userId}`; |
medium line 308
Template literal with variable interpolation in command context
SourceSKILL.md
| 308 | exec(`git commit -m "${userMessage}"`); |
low line 307
Node child_process module reference
SourceSKILL.md
| 307 | const { exec } = require('child_process'); |
low line 311
Node child_process module reference
SourceSKILL.md
| 311 | const { spawn } = require('child_process'); |
low line 302
Access to .env file
SourceSKILL.md
| 302 | const apiKey = process.env.API_KEY; |
low line 258
External URL reference
SourceSKILL.md
| 258 | // Payload: { "jti": nonce, "htm": "POST", "htu": "https://api.example.com/token", "iat": timestamp } |
Scanned on May 12, 2026
View Security DashboardGitHub Stars 18
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
claudefrontenddesigndocxgitapidatabasetestingdevopsmobilebackendsecurity-engineerdevops-sredata-engineerdevelopment
oimiragieo/agent-studio