mcp-security-review

Plugin mcp-security-review from marketplace ai-security-crew in Srajangpt1/ai-security-crew. Commands read from the repo's manifest — 28 days ago.

Skills (3)

• security-review

  Pre-coding security review for a development task: which parts of the system it touches, the threats to guard against, and the countermeasures to build in. Use before coding a feature, or when the user asks about security requirements, risks, or how to build something safely (login, payments, file u

• threat-model

  Developer-focused threat model for a feature, component or system: what can go wrong, how likely, and the concrete fix for each threat, with an optional threat-model.md file. Use when the user asks to threat model something, what attacks to worry about, the attack surface, a security design review,

• verify-code

  Security review of code that was just written or changed. Use after generating code, or when the user asks whether code is secure, to check for vulnerabilities, or to audit a file before shipping (especially auth, APIs, file handling, database queries, agents or anything that handles user input).

MCP servers (1)

• sec-review

  runs: uvx --from git+https://github.com/Srajangpt1/ai-security-crew mcp-security-review

Hooks (3)

• PreToolUse

  [ -n "$TYPESAFE_API_KEY$ASC_GUARD_ENABLE" ] || exit 0; uvx --from git+https://github.com/Srajangpt1/ai-security-crew asc-guard hook pre-tool-use

• PostToolUse

  [ -n "$TYPESAFE_API_KEY$ASC_GUARD_ENABLE" ] || exit 0; uvx --from git+https://github.com/Srajangpt1/ai-security-crew asc-guard hook post-tool-use

• UserPromptSubmit

  [ -n "$TYPESAFE_API_KEY$ASC_GUARD_ENABLE" ] || exit 0; uvx --from git+https://github.com/Srajangpt1/ai-security-crew asc-guard hook user-prompt