From ruflo-security-audit
Run full security scans on the codebase using Ruflo security tools
How this skill is triggered — by the user, by Claude, or both
Slash command
/ruflo-security-audit:security-scan [depth: quick|standard|full][depth: quick|standard|full]This skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Run a security scan at the specified depth.
Run a security scan at the specified depth.
Via CLI:
npx @claude-flow/cli@latest security scan --depth DEPTH
npx @claude-flow/cli@latest security cve --check
npx @claude-flow/cli@latest security report --format markdown
| Depth | Checks |
|---|---|
| quick | Dependencies, known CVEs |
| standard | + Input validation, path traversal, secrets |
| full | + Threat modeling, injection vectors, auth flows |
Store findings via MCP: mcp__claude-flow__memory_store({ key: "scan-findings", value: "SUMMARY", namespace: "security" })
Train patterns: mcp__claude-flow__hooks_post-task({ taskId: "security-scan", success: true, storeResults: true })
Blocks Edit/Write/Bash actions until Claude investigates importers, data schemas, and user instructions. Improves output quality by forcing concrete facts before edits.
3plugins reuse this skill
First indexed May 13, 2026
npx claudepluginhub digitalcrest01/ruflow --plugin ruflo-security-audit