Home / Skills / xerj-security-audit

xerj-security-audit

xerj-org/xerjSkill

Coverage-guaranteed whitebox security audit of a codebase using XERJ + tree-sitter AST. Use when the user wants to security-review PHP (or other-language) code with a provable "we enumerated every dangerous call" guarantee, or asks to run the WordPress-style sink census / audit. Drives an index-once, query-read-reason loop; proves zero gaps against grep; enriches findings into a queryable ledger.

ScannedSkillSource: GitHub
10,503 stars +7,628 this week Updated 16d ago License Apache-2.0 Context ≈105 tokens always loaded
82popular

Why this score

Stars26/35
Usage (forks)10/15
Upkeep25/25
License15/15
Owner history6/10

This repo hosts 2 skills, so its 10,503 stars are split between them (about 5,252 each) for scoring.

Popularity score: 82/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit d177df590c74, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

NameScoreStarsContextUpdated
This onexerj-security-audit xerj-org/xerj · Skill 82★ 11k≈105 always16d ago
security-audit kubeshark/kubeshark · Skill Both about security 83★ 12k≈24 always20d ago
file-upload-security wpultimatesecurity/WordPress-Security-Skills · Skill Same job: content & copywriting, also for WordPress 50★ 50≈26 always1mo ago
octopus-security-audit nyldn/claude-octopus · Skill Both about security 75★ 4.3k≈31 always16d ago
audit-hosting hostinger/api-mcp-server · Skill Same job: content & copywriting, also for WordPress 63★ 163≈151 always16d ago
ai-mcp-security Netw0rkNoob/VulnClaw · Skill Both about security 71★ 3.8k≈20 always23d ago