claude

security-guidance

Optional external dependency (official Anthropic). Hooks-based in-session security review: per-edit pattern match, end-of-turn diff review, commit review. Pipeline runs without it; the security phase still does full OWASP.

55 on GitHubby David Dworkenv2.0.17MITupdated 17 days ago
/

Plugin security-guidance from marketplace sdlc-marketplace in AratKruglik/claude-sdlc. Commands read from the repo's manifest — 17 days ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Hooks (7)

  • SessionStart

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/ensure_agent_sdk.py"

  • UserPromptSubmit

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • Stop

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

View source on GitHub

More from AratKruglik/claude-sdlc

All 27 plugins →

superpowers

claudecodex

Runtime dependency. Enables richer reasoning in BA (brainstorming), QA (test-driven-development), and all architect agents (verification-before-completion). Pipeline degrades gracefully without it.

15 skills · hooks

55

sdlc

claude

Universal SDLC orchestrator with auto-discovery of stack providers. Provides pipeline-orchestrator skill plus 5 cost-tiered default agents (BA Opus/high, Dev Sonnet/medium, QA Sonnet/medium, Sec Opus/high, Docs Haiku/low). Slash commands: /sdlc:start, /sdlc:batch, /sdlc:doctor, /sdlc:list-stacks, /sdlc:security-init.

3 skills · 5 commands · 5 agents · hooks

55

angular-plugin

claude

Angular 18-21 SPA frontend stack provider (priority=200). Standalone + NgModule equally, signals + NgRx, typed Reactive Forms, Angular Router. Adds angular-architect agent (Sonnet/medium). Reuses TypeScript and npm skills from js-foundation.

5 skills · 1 agent · hooks

55

nestjs-plugin

claude

NestJS opinionated backend stack provider. Adds nest-architect agent (Sonnet/medium) covering REST + ORM (TypeORM/Prisma/Mongoose) + GraphQL + WebSockets + Microservices. Reuses TypeScript and npm skills from js-foundation.

5 skills · 1 agent · hooks

55

nextjs-plugin

claude

Next.js full-stack React framework. Multi-aspect ownership (backend + frontend, priority=250). App Router, Server Components, Server Actions, Route Handlers, ISR/SSG/SSR. Adds nextjs-architect agent (Sonnet/medium). Reuses TypeScript and npm skills from js-foundation.

5 skills · 1 agent · hooks

55

react-native-plugin

claude

React Native mobile stack provider (priority=300). Both Expo (managed/dev-client/EAS) and bare workflows. React Navigation v7 + Expo Router, AsyncStorage/MMKV, Jest + RTL Native. Adds rn-architect agent (Sonnet/medium). Wins over react-plugin on RN projects.

5 skills · 1 agent · hooks

55

Maintain security-guidance?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins27 plugins