security-cleanup
Applies fixes for security findings produced by /security-review. Use when the user wants to fix security issues found by /security-review or when they ask to clean up, remediate, or apply fixes for security findings.
Install
With your agent
Install OMGSkills skill "thejefflarson/soundcheck:.claude/skills/security-cleanup" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/thejefflarson/soundcheck /tmp/soundcheck && ln -s /tmp/soundcheck/.claude/skills/security-cleanup ~/.claude/skills/security-cleanupFrom README
Security Cleanup (A01:2025–A10:2025 + LLM01:2025–LLM10:2025) What this checks Applies fixes for security findings. Pair with /security-review to detect issues, then /security-cleanup to fix them. Vulnerable patterns This skill remediates, not detects. Run /security-review first. Procedure Get the findings: from the user's message, a recent /security-review output, or — if none are available — run /security-review first to produce them. For each finding (highest severity first): Read the cited file at the cited line Read .claude/skills/ /SKILL.md for the correct fix pattern Apply the fix using the Edit tool Use the language's idiomatic safe API (Go html/template, Python Environment(autoescape=True), Java PreparedStatement, etc.) After all findings are processed, summarize what was fixed.
More from this repo
authentication-failures
Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code.
broken-access-control
Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users'...
concurrency-correctness
Detects multi-threaded code where a lock is held across a blocking operation, lock acquisition order risks deadlock,...