Add Claude Code installer

2026-06-01 15:13:58 +01:00
parent f0ce44e496
commit 7453482712
2 changed files with 126 additions and 8 deletions
@@ -1,8 +1,8 @@
 # Security Audit Skill

-This installs the `securityaudit` Codex skill.
+This installs the `securityaudit` audit/fix workflow for Codex or Claude Code.

-## Easiest install
+## Codex install

 Paste this into Codex:

@@ -12,17 +12,25 @@ Use $skill-installer to install https://github.com/andydixon/securityaudit-skill

 Restart Codex after it installs.

-## Terminal install
-
-Paste this into Terminal:
+Or paste this into Terminal:

 ```bash
-curl -fsSL https://raw.githubusercontent.com/andydixon/securityaudit-skill/main/install.sh | bash -s -- andydixon/securityaudit-skill
+curl -fsSL https://raw.githubusercontent.com/andydixon/securityaudit-skill/main/install.sh | bash
 ```

 Restart Codex after it installs.

-## Use it
+## Claude Code install
+
+Paste this into Terminal:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/andydixon/securityaudit-skill/main/install-claude.sh | bash
+```
+
+Restart Claude Code if it was already open.
+
+## Codex usage

 Audit only:

@@ -36,4 +44,22 @@ Audit and fix:
 securityaudit --fix
 ```

-Fix mode only changes files when the project is already in a git repository. It runs tests before committing successful fixes.
+## Claude Code usage
+
+Audit only:
+
+```text
+/securityaudit
+```
+
+Audit and fix:
+
+```text
+/securityaudit --fix
+```
+
+## What it does
+
+Normal mode writes a project security audit report and does not change code.
+
+Fix mode only changes files when the project is already in a git repository. It runs tests before committing successful fixes. If the project is not a git repository, it refuses to make changes.
@@ -0,0 +1,92 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+REPO_SLUG="${1:-${SECURITYAUDIT_REPO:-andydixon/securityaudit-skill}}"
+REF="${2:-${SECURITYAUDIT_REF:-main}}"
+SKILL_PATH="${SECURITYAUDIT_SKILL_PATH:-securityaudit}"
+CLAUDE_HOME_DIR="${CLAUDE_HOME:-$HOME/.claude}"
+DEST_PARENT="$CLAUDE_HOME_DIR/skills"
+DEST="$DEST_PARENT/securityaudit"
+
+say() {
+  printf '%s\n' "$*"
+}
+
+fail() {
+  printf 'Error: %s\n' "$*" >&2
+  exit 1
+}
+
+need_command() {
+  command -v "$1" >/dev/null 2>&1 || fail "Missing required command: $1"
+}
+
+copy_claude_skill() {
+  src="$1"
+  [ -f "$src/SKILL.md" ] || fail "Could not find SKILL.md at $src"
+  grep -q '^name: securityaudit$' "$src/SKILL.md" || fail "SKILL.md does not look like the securityaudit skill"
+
+  mkdir -p "$DEST_PARENT"
+  stage="$(mktemp -d "$DEST_PARENT/.securityaudit-claude-install.XXXXXX")"
+  mkdir -p "$stage/securityaudit"
+
+  cp "$src/SKILL.md" "$stage/securityaudit/SKILL.md"
+  for dir in scripts references assets; do
+    if [ -d "$src/$dir" ]; then
+      cp -R "$src/$dir" "$stage/securityaudit/$dir"
+    fi
+  done
+
+  [ -f "$stage/securityaudit/SKILL.md" ] || fail "Install staging failed"
+  grep -q '^name: securityaudit$' "$stage/securityaudit/SKILL.md" || fail "Install validation failed"
+
+  if [ -e "$DEST" ]; then
+    backup="$DEST.backup.$(date +%Y%m%d-%H%M%S)"
+    say "Existing Claude securityaudit skill found. Backing it up to:"
+    say "$backup"
+    mv "$DEST" "$backup"
+  fi
+
+  mv "$stage/securityaudit" "$DEST"
+  rmdir "$stage" 2>/dev/null || true
+}
+
+SCRIPT_PATH="${BASH_SOURCE[0]:-}"
+if [ -n "$SCRIPT_PATH" ] && [ -f "$SCRIPT_PATH" ]; then
+  SCRIPT_DIR="$(cd "$(dirname "$SCRIPT_PATH")" && pwd)"
+else
+  SCRIPT_DIR=""
+fi
+
+if [ -n "$SCRIPT_DIR" ] && [ -f "$SCRIPT_DIR/$SKILL_PATH/SKILL.md" ]; then
+  say "Installing Claude Code securityaudit skill from local checkout..."
+  copy_claude_skill "$SCRIPT_DIR/$SKILL_PATH"
+else
+  need_command curl
+  need_command tar
+
+  tmp="$(mktemp -d)"
+  cleanup() {
+    rm -rf "$tmp"
+  }
+  trap cleanup EXIT
+
+  archive="$tmp/repo.tar.gz"
+  url="https://github.com/$REPO_SLUG/archive/refs/heads/$REF.tar.gz"
+
+  say "Downloading Claude Code securityaudit skill from $REPO_SLUG ($REF)..."
+  curl -fsSL "$url" -o "$archive"
+  tar -xzf "$archive" -C "$tmp"
+
+  src="$(find "$tmp" -path "*/$SKILL_PATH/SKILL.md" -print -quit)"
+  [ -n "$src" ] || fail "Could not find $SKILL_PATH/SKILL.md in the downloaded repo"
+  copy_claude_skill "$(dirname "$src")"
+fi
+
+say ""
+say "Installed Claude Code securityaudit skill to:"
+say "$DEST"
+say ""
+say "Restart Claude Code if it was already open, then use:"
+say "  /securityaudit"
+say "  /securityaudit --fix"