claude

security-guidance

Security review for Claude-generated code: pattern-based warnings on edits, LLM-powered diff review on stop, and an agentic commit reviewer catching injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

0 on GitHubby David Dworkenv2.0.7updated 2 months agosecurity
/

Plugin security-guidance from marketplace flo-claude-plugins in Flo500/flo_claude_plugins. Commands read from the repo's manifest — 1 month ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Hooks (12)

  • SessionStart

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/ensure_agent_sdk.py"

  • UserPromptSubmit

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • Stop

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

  • SubagentStop

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" "${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"

View source on GitHub code.claude.com

More from Flo500/flo_claude_plugins

All 13 plugins →

grill-me

claude

Matt Pocock's engineering skills bundle: grilling/planning interviews, spec and ticket flows, TDD, code review, domain modelling, and more (25 skills, including the Grill Me planning skill).

37 skills

0

hyperframes

claudecodex

HyperFrames by HeyGen: write HTML, render video. Compositions, GSAP/runtime-adapter animations, captions, voiceovers, audio-reactive visuals, and website-to-video capture.

26 skills

0

caveman

claude

Ultra-compressed communication mode. Cuts a large share of output tokens against an unprompted baseline while keeping full technical accuracy by speaking like a caveman.

20 skills · 1 command · 3 agents · hooks

0

claude-mem

claudecodex

Persistent memory system for Claude Code. Captures what your agent does during a session, compresses it, and injects relevant context back into future sessions.

22 skills · 1 MCP server · hooks

0

example-skills

claude

Anthropic's official example Agent Skills bundle, including Skill Creator - an interactive skill-building tool that guides you through creating new skills via Q&A.

19 skills

0

superpowers

claudecodex

Core skills library: TDD, debugging, collaboration patterns, and proven software development techniques.

15 skills · hooks

0

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

AAS Security Engineer

codex

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security-guidance?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins13 plugins