ghostsecurity/skills

Ghost Security's collection of AppSec skills for AI coding agents

What it solves

This project provides a set of AI-native application security skills designed to integrate with Claude Code, allowing developers to perform security audits and vulnerability assessments directly within their coding environment.

How it works

It functions as a plugin marketplace for Claude Code. Once installed, it adds a suite of specialized security tools (skills) that the AI agent can use to analyze code, dependencies, and secrets. These skills include static analysis (SAST), dependency scanning (SCA), secret detection, and dynamic validation (DAST) via a proxy.

Who it’s for

Developers and security engineers who use Claude Code and want to automate the detection and validation of security vulnerabilities in their repositories.

Highlights

  • Comprehensive Security Suite: Includes tools for SAST, SCA, and secret scanning.
  • Robot-led Validation: Features a ghost-validate skill for dynamic validation of findings against live applications.
  • Contextual Awareness: The ghost-repo-context skill builds a map of business criticality and sensitive data within the repository.
  • Integrated Reporting: The ghost-report skill aggregates results across all different security scans into a single report.

Related

  • Project
    Masriyan/Claude-Code-CyberSecurity-Skill

    A collection of 19 specialized skill modules for Claude Code that provide structured methodologies and automation for cybersecurity professionals across offensive and defensive operations.

  • Project
    bruc3van/agent-skills-guard

    A visual management and security auditing tool for Claude Code skills, providing a curated marketplace and a multi-layer scanning engine to prevent malicious code execution.

  • Project
    trailofbits/skills

    A marketplace of plugins for Claude Code and Codex that provides specialized skills for AI-assisted security analysis, auditing, and software development.

  • Project
    aiskillstore/marketplace

    An open-source marketplace repository for AI agent skills, providing a secure distribution system and CLI for adding capabilities to tools like Claude Code and Codex.

  • Project
    agamm/claude-code-owasp

    A security skill for Claude Code that integrates the latest OWASP standards (2025-2026) to help developers find vulnerabilities and implement secure coding patterns.