# security-cleanup

> Claude/Codex skill by [@thejefflarson](https://omgskills.com/library/thejefflarson/index.md) · 20 stars · Updated 2026-07-31

Applies fixes for security findings produced by /security-review. Use when the user wants to fix security issues found by /security-review or when they ask to clean up, remediate, or apply fixes for security findings.

Tags: llms, security, skills

## Install

```sh
git clone https://github.com/thejefflarson/soundcheck /tmp/soundcheck && ln -s /tmp/soundcheck/.claude/skills/security-cleanup ~/.claude/skills/security-cleanup
```

## From README

Security Cleanup (A01:2025–A10:2025 + LLM01:2025–LLM10:2025) What this checks Applies fixes for security findings. Pair with /security-review to detect issues, then /security-cleanup to fix them. Vulnerable patterns This skill remediates, not detects. Run /security-review first. Procedure Get the findings: from the user's message, a recent /security-review output, or — if none are available — run /security-review first to produce them. For each finding (highest severity first): Read the cited file at the cited line Read .claude/skills/ /SKILL.md for the correct fix pattern Apply the fix using the Edit tool Use the language's idiomatic safe API (Go html/template, Python Environment(autoescape=True), Java PreparedStatement, etc.) After all findings are processed, summarize what was fixed.

## Links

- HTML page: https://omgskills.com/library/thejefflarson/soundcheck/dot-claude/skills/security-cleanup/
- GitHub: https://github.com/thejefflarson/soundcheck
- Author: [@thejefflarson](https://omgskills.com/library/thejefflarson/index.md)

## More from this repo

- [authentication-failures](https://omgskills.com/library/thejefflarson/soundcheck/dot-claude/skills/authentication-failures/index.md) — Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code.
   - [@thejefflarson](https://omgskills.com/library/thejefflarson/index.md) · 20 stars
- [broken-access-control](https://omgskills.com/library/thejefflarson/soundcheck/dot-claude/skills/broken-access-control/index.md) — Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users'...
   - [@thejefflarson](https://omgskills.com/library/thejefflarson/index.md) · 20 stars
- [concurrency-correctness](https://omgskills.com/library/thejefflarson/soundcheck/dot-claude/skills/concurrency-correctness/index.md) — Detects multi-threaded code where a lock is held across a blocking operation, lock acquisition order risks deadlock,...
   - [@thejefflarson](https://omgskills.com/library/thejefflarson/index.md) · 20 stars