Secrets and dependencies: find leaked keys and old packages
API keys get saved in git or shipped in front-end code, and few people know how to replace a leaked key. Old packages can have known security holes. These add-ons check your code and its dependencies for these problems.
Free picks (tested by us)
Most useful first. Each one was installed on a clean test system; start with the first, try it, then add the next.
Security experts’ checklists to review your own code.
Test: installs cleanly; its main features need an account we did not use. Not yet used on real work.
Good forSecurity testing, Web developersWatch outUse these skills only on code you own or have written permission to test. Some skills in the collection are for deeper attack research; we list only the review ones.
For Claude CodeAlso works with Codex CLI — see all steps