Ghost Security's Skills Marketplace supercharges Claude Code to be an application security expert in code security analysis, dependency/secrets scanning, and dynamic vulnerability testing
# Add to your Claude Code skills
git clone https://github.com/ghostsecurity/skillsLast scanned: 5/30/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-30T16:10:52.237Z",
"npmAuditRan": true,
"pipAuditRan": true
}skills is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by ghostsecurity. Ghost Security's Skills Marketplace supercharges Claude Code to be an application security expert in code security analysis, dependency/secrets scanning, and dynamic vulnerability testing. It has 146 GitHub stars.
Yes. skills passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/ghostsecurity/skills" and add it to your Claude Code skills directory (see the Installation section above).
skills is primarily written in Shell. It is open-source under ghostsecurity on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh skills against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Plugin marketplace repository for Ghost Security's AI-native application security skills for Claude Code.
With Claude Code:
claude plugin marketplace add ghostsecurity/skills
claude plugin install ghost@ghost-security
claude
Alternatively, install the skills plugin within Claude Code:
/plugin marketplace add ghostsecurity/skills
/plugin install ghost@ghost-security
Currently, you will need to restart Claude Code for the plugin to load.
Full documentation, tutorials, and video guides at ghostsecurity.ai.
| Skill | Description |
|---|---|
ghost-repo-context |
Build shared repository context (business criticality, sensitive data, component map) |
ghost-scan-deps |
Exploitability analysis of dependency vulnerabilities (SCA) |
ghost-scan-secrets |
Context assessment of detected secrets and credentials |
ghost-scan-code |
AI-powered detection of code security issues (SAST) |
ghost-report |
Combined security report across all scan results |
ghost-validate |
Dynamic validation of findings against a live application (DAST) |
ghost-proxy |
HTTP proxy for the ghost-validate skill |
Open an Issue per the Contributing guidelines and Code of Conduct
This repository is licensed under the Apache License 2.0. See LICENSE for details.