claude

security

Security hardening skills — GitHub Actions pipeline hardening and CI security.

12 on GitHubby 37signalsv1.1.1MITupdated 1 month agosecurity
/

Plugin security from marketplace 37signals in basecamp/claude-plugins. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (1)

  • harden-github-actions

    Use when resolving zizmor warnings in GitHub Actions workflows, hardening CI pipelines, or pinning actions to SHA hashes. Covers artipacked, template-injection, excessive-permissions, secrets-outside-env, dependabot-execution, and when to suppress vs fix. Also covers scheduling vulnerability scanner

View source on GitHub

More from basecamp/claude-plugins

All 8 plugins →

dev

claude

AI-assisted development workflow — PR reviews, plan-implement loops, and expert consultation.

5 skills · hooks

12

basecamp

claudecodex

Deprecated alias for basecamp-cli, kept so existing installs keep working. Install basecamp-cli instead, or run `basecamp setup` to switch.

3 skills · hooks

12

basecamp-cli

claudecodex

CLI-based Basecamp for Claude Code and Codex, driven by the basecamp command. Create todos, track work, link code to projects.

3 skills · hooks

12

recap

claude

Activity digests — pluggable source fetchers, progressive timescale synthesis, audience-aware composition.

4 skills

12

ai

claude

AI skill development — crafting agent skills and writing install documentation for autonomous execution.

3 skills

12

hey

claude

HEY integration for Claude Code. Read email, manage todos, track time.

1 skill · hooks

12

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins8 plugins