$claude/security-skill

Security scanning
inside Claude Code.

Install one skill. Tell Claude to scan your app. Get findings, evidence, and AI-assisted fixes — without leaving your terminal.

$claude skill install github:launchguard/launchguard-skill

Works with Claude Code, Cursor, Codex CLI, and Gemini CLI

How it works

01

INSTALL

One command adds the skill to Claude Code. It reads your project files to find deployment URLs and Supabase credentials automatically.

$claude skill install github:launchguard/launchguard-skill
02

SCAN

Tell Claude to scan your app. It runs an external security audit from our servers — probing every surface an attacker would reach.

$/launchguard scan myapp.com
03

FIX

Claude presents findings with severity, evidence, and impact. Then it offers to fix the issues directly in your codebase — RLS policies, key rotation, bucket permissions.

RLS policiesKey rotationBucket permissionsRPC lockdown

What it finds

Exposed Tables

Missing RLS, open read/write, row counts

Leaked Keys

Service role keys in client JavaScript

Open Storage

Publicly listable buckets and files

Exposed RPCs

Server functions callable without auth

Edge Functions

Open to anonymous callers

Hidden Tables

Found via PostgREST error hints

Every finding includes evidence — actual data from the probe, not guesswork. Write tests use PostgREST's tx=rollback so nothing is persisted.

ONGOING GUARD

Deploy-triggered monitoring

After fixing issues, Claude offers to set up Ongoing Guard. It watches your app for deploys and re-scans automatically — you only get emailed when something breaks.

Checks every 15 minutes for deploys
Full re-scan on fingerprint change
Email alerts only when issues found
Set up directly from Claude Code

Free vs Pro

Freevia this skill
  • External scan (anonymous attacker view)
  • RLS, storage, RPCs, edge functions
  • Write testing with rollback
  • AI-assisted fixes in your editor
  • Ongoing Guard monitoring
Pro$29/mo
  • Authenticated scanning (IDOR detection)
  • Attack chain analysis
  • Live data fetch + AI sensitivity
  • Tailored fix prompts
  • Full scan history & dashboard
See pricing

The free scan shows what an anonymous attacker sees. Pro shows what an authenticated attacker can do — catching IDOR and broken access control that anonymous scanning misses.

Also works with

Claude CodeCursorCodex CLIGemini CLI

Follows the Agent Skills open standard

$ claude skill install github:launchguard/launchguard-skill

Scan your app in 40 seconds

Free security scanning. No signup. No config.

Try the web scanner