skills/review-skills/SKILL.md
Review ShakerScan skills, commands, and subagents for broken references, invalid Claude Code configuration, prompt anti-patterns, missing hard gates, missing outputs, and weak operational guidance. Use when asked to audit, review, or quality-check the skill system itself.
npx skillsauth add andriyze/shakerscan review-skillsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill to review the entire ShakerScan skill and command surface like a code review, not as a lightweight summary.
Review all of these unless the user explicitly narrows scope:
skills/*.mdskills/**/SKILL.mdskills/**/references/*skills/**/agents/openai.yaml.claude/commands/*.md.claude/agents/*.mdLook for:
Maintain this checklist in markdown while you work. Do not move on to synthesis or a final answer until every item is [x] or [n/a] with a short reason.
Return:
If there are no issues, say so clearly and still note any residual risk or test gaps.
development
Analyze JavaScript bundles, frontend routes, browser-captured APIs, libraries, and secrets for a ShakerScan target or completed scan. Use when asked for JS analysis, route analysis, frontend endpoint discovery, library review, source-map hints, or to build `custom_endpoints` for a ShakerScan scan.
development
Build target-specific content discovery seeds, path lists, and ShakerScan scan inputs from scan results, JS analysis, framework clues, and exposed docs. Use when asked for content discovery, wordlist generation, ffuf seeds, admin path discovery, hidden file discovery, route discovery, or custom endpoint seeding.
development
Interactive Playwright session control for the ShakerScan `/session` API. Use when asked to start or drive an AI security testing session, perform manual browser actions, or run BOLA/IDOR testing via session endpoints.
development
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.