Scan code you write or modify against ZeroPath's AI appsec engine (SAST, secrets, SCA, IaC), and triage findings from your ZeroPath organization directly from chat.
Plugin zeropath from marketplace ZeroPathAI in ZeroPathAI/zeropath-agent-plugin. Commands read from the repo's manifest — 1 month ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use and it starts local MCP servers. The exact commands are listed below; read them before installing.
claudeApply, decline, or remove the ZeroPath usage block in the project CLAUDE.md. Idempotent; records consent so SessionStart stops nudging.
explainExplain why a ZeroPath finding matters in this codebase.
findingsList open ZeroPath issues in this repo (or org). Read-only.
fixFix a single ZeroPath finding end-to-end; verifies with a re-scan.
investigateTrigger ZeroPath's cloud AI to investigate whether a finding is exploitable.
ruleAuthor a custom ZeroPath rule from a description; dry-runs before creating.
scanScan session edits with ZeroPath's cloud scanner; drives a fix-and-rescan loop.
statuslineInstall or remove the ZeroPath statusline. Writes to your ~/.claude/settings.json with explicit consent; refuses to overwrite an existing statusline.
triageBulk archive / mark FP / update status on findings. Confirms before mutating.
updateUpdate the plugin to the latest GitHub release.
zeropath-explainerExplains why a ZeroPath finding matters in this codebase, with real code references.
zeropath-investigatorTriggers ZeroPath's cloud AI to investigate whether a finding is exploitable; polls, summarizes.
zeropath-reviewerIndependent security review of a diff or files. Returns a BLOCK/FLAG/PASS verdict.
zeropath-rule-authorAuthors a custom ZeroPath rule from a description; dry-runs before creating.
zeropath-scannerRuns the zeropath CLI on session edits, parses SARIF, drives a fix-and-rescan loop.
zeropath-triagerBulk-mutates ZeroPath findings (archive/FP/status/severity) with confirmation.
zeropathruns: uvx --from git+https://github.com/ZeroPathAI/zeropath-mcp-server zeropath-mcp-server
node ${CLAUDE_PLUGIN_ROOT}/hooks/session-start.mjs
node ${CLAUDE_PLUGIN_ROOT}/hooks/post-tool-use.mjs
node ${CLAUDE_PLUGIN_ROOT}/hooks/pre-tool-use.mjs
node ${CLAUDE_PLUGIN_ROOT}/hooks/pre-compact.mjs
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.