We couldn't find this pack under your signed-in email. If you paid with a different address, email info@skillproof.dev with your Stripe receipt — we'll link it fast.
Engineers who ship to production 🛡️ New
Security & Code Review Pack
Ten skills that turn Claude into a second set of eyes on your code: security-focused PR reviews, root-cause debugging, a test-driven safety net, real-browser and API-contract testing, and Solidity/opsec reviews for web3 teams. Verified anchors plus the freshest review-and-audit finds from our crawler (queue-marked), with our pre-ship security checklist, threat-model worksheet and dependency-audit sheet.
- 10 skills for code review, testing and security auditing
- Code Review Checklist (8.4/10) + Systematic Debugging (9.6/10) + TDD (9.6/10) as verified anchors
- Pre-ship security checklist — injection, authz, secrets, deserialization
- Threat-model worksheet (STRIDE-lite) + dependency & secret audit sheet
- Setup guide with the correct install order
- Lifetime updates — queue skills get verdicts, pack gets refreshed
What you actually download
In the zip
SETUP-GUIDE.md — install order + test verdictsinstall.sh — one-command setuptemplates/security-review-checklist.mdtemplates/threat-model-worksheet.mdtemplates/dependency-audit-checklist.md
Preview the SETUP-GUIDE.md (first page)
# Security & Code Review Pack — Setup Guide Ten skills that turn Claude into a second set of eyes on your code. > Every skill below was tested on real work by SkillProof. Scores are out of 10; > full test reports live at https://skillproof.dev/skills/<slug>. ## Install order (it matters — dependencies first) ### 1. Code Review Checklist — ★ 8.4/10 Structured PR reviews that find bugs, not style nits. **Our test:** Reviewed a 600-line PR: found one real off-by-one and two dead-code paths, zero style-only nitpicks. ### 2. Systematic Debugging — ★ 9.6/10 Stops guess-and-check fixes; enforces hypothesis-driven root-causing.
Every skill inside, with its test verdict
- 001 Tested · Works
Structured PR review checklist: security, performance, correctness, severity-labeled.
- 002 Tested · Works
Stops guess-and-check fixes; enforces hypothesis-driven debugging.
- 003 Tested · Works
Test-Driven Development Featured
Forces Claude into strict red-green-refactor discipline.
- 004 Tested · Works
Claude drives your web app in a real browser and reports what breaks.
- 005 Works with setup
Generates and runs OpenAPI-driven contract tests via SmartBear's Drift CLI — but `drift verify` hard-requires a PactFlow account login, undisclosed in the skill.
- 006 Tested · Works
Conventional Commits, branch naming, and merge-strategy standards, with 7 reference docs.
- 007 Works with setup
Smart Contract Vulnerability Auditor
4-phase Solidity vulnerability scan across 36 exploit classes (Solidity only).
- 008 Tested · Works
Structured 8-section wallet security checklist: keys, approvals, signing, phishing, opsec, multisig, incident response.
- 009 Tested · Works
k6 load-testing reference and scenario/threshold patterns — k6 only, not Locust as the old card claimed.
- 010 Tested · Works
Skill Creator Featured
The skill that builds skills — scaffold, test and optimize your own.
From the test bench
First-party notes from assembling and re-testing this pack — not customer reviews. Buyer feedback is published here as it comes in (reply to your purchase email to add yours).
-
★★★★★
On a 600-line PR the review skill found a real off-by-one and two dead-code paths and skipped the style noise. That is the whole point of a security review — signal, not nitpicks.
SkillProof test bench · verified during pack assembly
-
★★★★★
Systematic Debugging root-caused a race condition Claude had 'fixed' three times with guesses. The hypothesis-test-verify loop is what stops a security bug from being papered over.
SkillProof test bench · verified during pack assembly
-
★★★★☆
The web3 reviews (smart-contract-review, wallet-security-checklist) and API-contract testing are still queue-marked — we ship them with the verified review/test/debug anchors and finish scoring them on the pack's lifetime updates.
SkillProof test bench · verified during pack assembly