Checkmarx-powered security scanning and fixing inside your coding loop. Checks the code you write and the code AI generates for vulnerabilities and risky dependencies, then returns precise, engine-backed fixes. Best invoked after writing or changing code, before commits, and around security-sensitive logic. Applies fixes inline so you can accept them without leaving your editor.
Plugin cx-devassist from marketplace cx-devassist-marketplace in Checkmarx/cx-agentic-ai. Commands read from the repo's manifest — 21 days ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use and it starts local MCP servers. The exact commands are listed below; read them before installing.
cx-cli-setupInstalls, configures, and authenticates the Checkmarx cx CLI (API key or browser OAuth sign-in). Use when the cx CLI is missing, outdated, or not authenticated. Invoke as: cx-devassist:cx-cli-setup
cx-devassist-ascaRuns a Checkmarx ASCA (AI Security Code Assistant) SAST scan on a SOURCE CODE file to detect code vulnerabilities, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan or fix a source code file (.py/.js/.java/.go/.ts/…) for security vulnerabilities. Also invoke this ski
cx-devassist-kicsRuns a Checkmarx KICS (Keeping Infrastructure as Code Secure) scan on an IaC file — Dockerfile, Terraform, Kubernetes YAML, and similar templates — to detect infrastructure misconfigurations, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan or fix an IaC file (Docke
cx-devassist-scaRuns a Checkmarx SCA (Software Composition Analysis / OSS) scan on dependency manifests and lockfiles to detect vulnerable and malicious open-source packages, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan dependencies, check packages, audit a manifest/lockfile (p
Checkmarxruns: sh ${CLAUDE_PLUGIN_ROOT}/hooks/cx_run.sh mcp bridge
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_record_login.sh"
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_check.sh"
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_run.sh" hooks claude-pre-file-write
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_check.sh"
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_run.sh" hooks claude-pre-file-write
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_check.sh"
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_run.sh" hooks claude-pre-file-write
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_check.sh"
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_run.sh" hooks claude-pre-tool-use
sh "${CLAUDE_PLUGIN_ROOT}/hooks/cx_run.sh" hooks claude-stop
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.