security

Plugin security from marketplace cc-plugins in Zate/cc-plugins. Commands read from the repo's manifest — 1 month ago.

Skills (14)

• asvs-requirements

  OWASP ASVS 5.0 requirements database for security audits. Provides chapter structure, control objectives, and verification requirements for all 17 ASVS domains.

• baseline

  Create or update the project security baseline, profile, suppressions file, and gitignore entries for security scans

• fix

  Fix or guide remediation for a specific security finding from the latest scan report

• remediation-auth

  Security fix patterns for authentication and authorization vulnerabilities (credentials, JWT, deserialization, access control). Provides language-specific secure implementations.

• remediation-config

  Security fix patterns for configuration and deployment vulnerabilities (path traversal, debug mode, security headers). Provides language-specific secure implementations.

• remediation-crypto

  Security fix patterns for cryptographic vulnerabilities (weak algorithms, insecure randomness, TLS issues). Provides language-specific secure implementations.

• remediation-injection

  Security fix patterns for injection vulnerabilities (SQL, Command, XSS). Provides language-specific code examples showing vulnerable and secure implementations.

• remediation-library

  Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.

• results

  View the most recent security scan results without re-running the scan

• scan

  Run a security assessment using deterministic static analysis tools with LLM-powered triage

• setup

  Inspect and optionally install security scanning tools for the security plugin

• vuln-patterns-core

  Universal vulnerability detection patterns applicable across all programming languages. Includes hardcoded secrets, SQL/command injection, path traversal, and configuration file patterns.

• vuln-patterns-languages

  Language-specific vulnerability detection patterns for JavaScript/TypeScript, Python, Go, Java, Ruby, and PHP. Provides regex patterns and grep commands for common security vulnerabilities.

• vulnerability-patterns

  Index of vulnerability detection pattern skills. Routes to core patterns (universal) and language-specific patterns for security scanning.

Subagents (1)

• triage-agent

  Triage static analysis findings using CWE-specialized criteria. Classifies findings as true positives, false positives, or needs review. Never scans code directly -- only assesses tool output. Use when: Security scan has produced raw findings that need triage. Do NOT use when: User wants to explore

Hooks (2)

• PreToolUse

  "${CLAUDE_PLUGIN_ROOT}/scripts/run-script.cmd" pre-tool-guard

• PostToolUse

  "${CLAUDE_PLUGIN_ROOT}/scripts/run-script.cmd" post-write-scan

Similar plugins