Give Claude a Heist Crew That Hacks Your App Before a Real Hacker Does: Set Up /heist in 2 Minutes
Claude will tell you your app looks fine. A real hacker will not. This free Claude Code skill sends a crew of five roles through your code the way a thief would: a scout, three attackers that go after your code, your users and your data, and a mastermind that chains what they find into one report. How to set it up, ready-made prompts, and what a report looks like
Ask Claude whether your app is secure and it will usually find something reassuring to say. An attacker is not looking for reassurance. They are looking for the one door you left open.
This skill gives Claude a crew that plays the thief. You type /heist, and you get a report of every way in they found.
What /heist does
- The scout maps your app: the routes, the login, the password reset, the database calls and the places that use secrets.
- Three attackers each plan their own break-in. One goes after your code (the classic trick of typing SQL into a login box is one thing it looks for). One goes after your users (password reset links, sessions, trust in an email link). One pretends to be an ordinary user and tries to open other people's data.
- The mastermind reads all three reports and tries to chain the holes together: which combination gets an attacker the furthest.
- You get one report: the best break-in path, every hole with where it is and how to fix it, and the one change to make first.
It reads your code and nothing else. It never runs your app, never sends a request, never installs anything and never changes a file. It is a review on paper, so it cannot break your site while it looks.
Keep reading
Free, for an email.
Unlocks 5 more sections, 8 copy-paste prompts, the document version, and every other guide on the site, for free. Enter your email once to keep reading.
19,000+ follow where these guides come from.No spam. Unsubscribe in one click.