Updated 6mo ago
by rhysha
claude-security-research-skill
AI-powered security research assistant for Claude Code — structured assessment workflows, tool orchestration, and professional reporting across recon, enumeration, vulnerability scanning, and secrets auditing. Built for security researchers and bug bounty hunters who want Claude as an analyst, not a command generator.
22 GitHub stars (22)
Steady at 22 stars — no new stars in the 16 days since Sep 30.
- 1 skill (1 skills found in its SKILL.md files)
- 2 forks (2 forks)
- 6mo ago last update (Last updated 6mo ago)
Install
Skills CLI
npx skills add rhysha/claude-security-research-skill
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/rhysha/claude-security-research-skillcp -r "claude-security-research-skill" ~/.claude/skills/claude-security-research-skill
Copies the security-research skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add rhysha/claude-security-research-skill
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
security-research
Full-spectrum security research skill for web servers, REST APIs, web applications, and network/port enumeration. Triggers whenever the user wants to: find vulnerabilities, run a security assessment, scan a target, test an API for security issues, enumerate ports or services, check for OWASP Top 10 vulnerabilities, audit auth/secrets, fuzz endpoints, run recon on a domain or IP, or use tools like…
SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.