Updated 5mo ago
by bridge-mind
BridgeSecurity
Find vulnerabilities. Ship secure. — Senior security-engineer skill for AI coding agents. OWASP Top 10, CWE Top 25, secrets detection, IaC + CI hardening, and a read-only auditor subagent. MIT.
31 GitHub stars (31)
Steady at 31 stars — no new stars in the 16 days since Sep 30.
- 2 skills (2 skills found in its SKILL.md files)
- 7 forks (7 forks)
- 5mo ago last update (Last updated 5mo ago)
Install
Skills CLI
npx skills add bridge-mind/BridgeSecurity
Asks which skills and agents to install. Just one: npx skills add bridge-mind/BridgeSecurity --skill bridgesecurity — add -g for every project.
Claude Code
git clone https://github.com/bridge-mind/BridgeSecuritycp -r "BridgeSecurity/skills/bridgesecurity" ~/.claude/skills/
Copies the bridgesecurity skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add bridge-mind/BridgeSecurity
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
bridgesecurity
Senior security-engineer instincts for AI coding agents. Activate whenever the agent reads, writes, reviews, or refactors code — backend, frontend, infrastructure-as-code, CI/CD pipelines, container manifests, or cloud config. Detects and prevents vulnerabilities across OWASP Top 10, OWASP API Top 10, OWASP LLM Top 10, and CWE Top 25: injection (SQLi, NoSQLi, command, template), SSRF, XSS, CSRF,…
skills/bridgesecurity/SKILL.md on GitHub (opens in a new tab) -
security-audit
Audit a file, directory, repository, or PR diff for security vulnerabilities. Use when reviewing code for OWASP Top 10 / CWE Top 25 issues, identifying injection / XSS / SSRF / IDOR / authentication flaws, scanning for hardcoded secrets, reviewing infrastructure-as-code (Terraform, Kubernetes manifests, Dockerfiles), auditing CI/CD configurations (GitHub Actions, GitLab CI), or performing a pre-m…
skills/security-audit/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.