claude

security-toolkit

Defensive security for everyday shipping: 10-minute threat models, per-entry-point review checklist (injection, authZ/IDOR, secrets, crypto, uploads), dependency/supply-chain routine, incident basics, and deep-review orchestration for full audits. Authorized-defensive scope only.

0 on GitHubby TU_USUARIOv0.1.0MITupdated 30 days agosecurity
/

Plugin security-toolkit from marketplace claude-core-base in MatiasJF/claude-core-base. Commands read from the repo's manifest — 26 days ago.

What it installs

Skills (1)

  • sec-review

    This skill should be used when the user asks to "security review this", "threat model", "check for vulnerabilities", "audit dependencies", "is this safe", "handle secrets properly", or before shipping anything auth-, payment-, or user-data-related. Sets the lightweight threat-model pass, secrets hyg

View source on GitHub

More from MatiasJF/claude-core-base

All 13 plugins →

hyperframes

claudecodex

Externo (Apache-2.0, HeyGen): crear y renderizar vídeo desde HTML; animación, audio, keyframes y medios.

34 skills

0

taste-skill

claudecodex

Externo (MIT, leonxlnx): skills de gusto de diseño frontend, imagen a código y kits de marca.

14 skills

0

Turn a big task into a tree of agents. A routing skill decides when to decompose work, picks the right fan-out pattern (deep-review, parallel-research, design-tournament, migrate), and drives reusable Workflow scripts with planner/worker/verifier/synthesizer agent archetypes.

1 skill · 1 command · 4 agents

0

Comandos genéricos: documentación técnica en DOCX y escaneo de secretos.

2 commands

0

Data analysis discipline: the pull-profile-analyze-visualize-report pipeline, statistical rigor rules (effect sizes, denominators, confounders, seasonality, distributions, multiple comparisons), honest-uncertainty reporting, and dataviz-skill integration for charts.

1 skill

0

Database discipline: destructive-SQL gates (state loss, verify backup, confirm), environment echo before mutations, expand-migrate-contract migration discipline with reversibility, schema rules that model access patterns, and a query review checklist (EXPLAIN, indexes, N+1s, parameterization).

1 skill

0

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security-toolkit?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins13 plugins