claude

security

Security scanning, auditing, and compliance validation with 4 specialized agents, plus fail-closed hooks: PII/secrets guard, HMAC-chained tamper-evident audit (CloudWatch dual-write), token-budget circuit breaker

412 on GitHubby AWS Solutions Libraryv1.1.0MIT-0updated 1 month agosecurity
/

Plugin security from marketplace aws-claude-code-plugins in aws-solutions-library-samples/guidance-for-claude-code-with-amazon-bedrock. Commands read from the repo's manifest — 1 month ago.

What it installs

Slash commands (2)

  • /security:permission-audit

    Comprehensive audit of permissions and security configuration

  • /security:security-scan

    Comprehensive security audit with deep thinking and parallel analysis

Subagents (4)

  • business-analyst

    Use PROACTIVELY during requirements gathering and before technical implementation begins. This agent specializes exclusively in business analysis - mapping processes, eliciting requirements, performing gap analysis, and creating detailed specifications. Automatically generates BRDs from stakeholder

  • qa-engineer

    MUST BE USED before every release to ensure comprehensive quality validation and prevent defects from reaching production. This agent specializes exclusively in quality assurance - creating test plans, designing test cases, executing exploratory testing, and tracking quality metrics. Automatically g

  • security-reviewer

    MUST BE USED before every deployment and pull request. This agent focuses solely on security vulnerability detection and remediation - scanning for OWASP Top 10, analyzing authentication/authorization, checking dependencies for CVEs, and validating data protection. Automatically blocks insecure code

  • system-designer

    MUST BE USED when designing high-level system architecture for new projects or major system changes. This agent specializes exclusively in system design - creating component diagrams, defining service boundaries, designing data flows, and establishing integration patterns. Automatically creates syst

View source on GitHub aws.amazon.com

More from aws-solutions-library-samples/guidance-for-claude-code-with-amazon-bedrock

All 15 plugins →

epcc-workflow

claude

EPCC (Explore-Plan-Code-Commit) systematic development workflow with 12 specialized agents for exploration, planning, coding, and commit phases

7 commands · 12 agents

412

documentation

claude

Complete Diataxis documentation framework with 12 specialized agents for tutorials, how-tos, references, explanations, and analysis

5 commands · 12 agents

412

architecture

claude

Architecture design, review, and documentation with 10 specialized agents for C4 diagrams, ADRs, and quality analysis

3 commands · 10 agents

412

tdd-workflow

claude

TDD workflow with 6 specialized agents for test-first development, red-green-refactor cycle, and comprehensive quality analysis

2 commands · 6 agents

412

performance

claude

Performance profiling, optimization, and monitoring with 5 specialized agents for comprehensive performance analysis

1 command · 5 agents

412

agile-tools

claude

Agile team roles: Scrum Master, Product Owner, Business Analyst, and Project Manager agents

4 agents

412

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

AAS Security Engineer

codex

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins15 plugins