Tags: claudecode, security, nodejs, opensource, devsecops
Introduction
Backend security is one of the most important aspects of modern application development.
Whether you're building a MERN application, an Express API, a NestJS backend or a Next.js application, vulnerabilities can exist across authentication, authorization, database queries, API endpoints and infrastructure configurations.
I wanted to create a reusable security workflow that developers could run directly inside Claude Code.
That's how Hackers Hate This started.
What is Hackers Hate This?
It is an open-source Claude Code skill designed to perform structured security audits, identify vulnerabilities, generate security tests and help developers harden their applications.
It follows established security guidance, including OWASP Top 10, API Security Top 10, ASVS and CWE.
Key capabilities
- Backend security auditing.
- SQL and NoSQL injection detection.
- Database security assessment.
- Authentication and authorization reviews.
- API security and rate-limiting checks.
- Next.js and NestJS security reviews.
- Security test generation.
- Approval-based remediation and verification.
How does it work?
The workflow follows:
Discovery → Audit → Report → Approval → Remediation → Verification.
The goal is to provide actionable findings rather than vague security warnings.
Installation
git clone https://github.com/dev-shamsali/hackers-hate-this ~/.claude/skills/hackers-hate-this Restart Claude Code and run:
/hackers-hate-this Open-source contribution
The project is released under the MIT License.
I'm looking forward to contributions, independent testing, bug reports and suggestions from the developer and security communities.
