claudecodex

trove-security

Security review and vulnerability scanning

10 on GitHubby Trove Contributorsv2026.11.11.1MITupdated yesterdayIT & security
/

Plugin trove-security from marketplace trove in bravew/trove. Commands read from the repo's manifest — yesterday.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (2)

  • trove-secret-scan

    Scan files for accidentally committed secrets, API keys, and credentials. Flags common secret patterns and suggests remediation.

  • trove-security-review

    Security review skill that checks code for common vulnerabilities. Covers OWASP Top 10, secret detection, and secure coding patterns.

Subagents (1)

  • security-reviewer

    Automated security review agent that scans code changes for OWASP Top 10 vulnerabilities, secret leaks, and insecure patterns. Use for pre-merge security checks on pull requests.

Hooks (1)

  • PreToolUse

    ${CLAUDE_PLUGIN_ROOT}/hooks/security-check.sh

View source on GitHub

More from bravew/trove

All 9 plugins →

trove-dev

claudecodex

Developer skills: coding patterns, code review, git workflow, debugging

17 skills · 9 commands · 1 agent · hooks

10

trove-workflow

claudecodex

Workflow methodology skills and session bootstrap

24 skills · hooks

10

trove-media

claudecodex

Media skills: video and audio editing, transcoding, delivery checks, and production workflows

8 skills

10

trove-design

claudecodex

Designer skills: Figma review, accessibility, design systems

5 skills

10

trove-doc

claudecodex

Obsidian notes, Bases, JSON Canvas, vault operations, and web clipping

5 skills

10

trove-infra

claudecodex

Infrastructure and DevOps automation

3 skills

10

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

impeccable

claude

Design fluency for frontend development. 1 skill with 24 commands (/impeccable polish, /impeccable audit, /impeccable critique, etc.) and curated anti-pattern detection.

1 skill · 4 agents · hooks

pbakaus/impeccable 109,099

agentdb

claude

AgentDB (external: maintained in ruvnet/agentdb, pinned to commit 27678c3, plugin 3.6.0): agentdb's own standalone MCP server pinned to [email protected] (vector memory with get/list/update/delete for records, patterns and skills, hybrid keyword + vector episode search and an opt-in local cross-encoder, an opt-in aidefence injection guard on memory writes, reflexion, skills, outcome feedback, capabilities report), a memory-specialist agent, 3 skills, /agentdb-status, and the agentdb mod guard that keeps secrets out of memory and refuses delete/reset unless allowed. Complements ruflo-agentdb, which reaches AgentDB through ruflo's server

3 skills · 1 command · 1 agent · 1 MCP server

ruvnet/ruflo 81,589

academic-research-skills

claude

5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.

5 skills · 16 commands · 4 agents · hooks

Imbad0202/academic-research-skills 56,698

Maintain trove-security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins9 plugins