Ask your coding tool "is this safe to ship?": scans for leaked keys, open routes, database rules, dependencies and settings, with a fix for each finding. Includes guard hooks that stop destructive database commands.
Plugin arbiter from marketplace arbiter in RichardsonDaniel/arbiter-plugin. Commands read from the repo's manifest — 19 days ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
arbiterUse when the user asks whether an app is safe to ship, before a deploy, after changing authentication, API routes, database policies or migrations, or when a scan report needs to be acted on. Runs the Arbiter security scan through its MCP tools and applies fixes carefully.
/arbiter:scanScan this project with Arbiter and summarise what to fix first
arbiterconnects to: ${ARBITER_MCP_URL:-https://api.arbiterscan.com/mcp}
node "${CLAUDE_PLUGIN_ROOT}/hooks/guard.mjs"
node "${CLAUDE_PLUGIN_ROOT}/hooks/edit-guard.mjs"
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
AgentDB (external: maintained in ruvnet/agentdb, pinned to commit 27678c3, plugin 3.6.0): agentdb's own standalone MCP server pinned to [email protected] (vector memory with get/list/update/delete for records, patterns and skills, hybrid keyword + vector episode search and an opt-in local cross-encoder, an opt-in aidefence injection guard on memory writes, reflexion, skills, outcome feedback, capabilities report), a memory-specialist agent, 3 skills, /agentdb-status, and the agentdb mod guard that keeps secrets out of memory and refuses delete/reset unless allowed. Complements ruflo-agentdb, which reaches AgentDB through ruflo's server
3 skills · 1 command · 1 agent · 1 MCP server
Install the "AAS Secure App Builder" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.