claude

security-guidance

Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns

1,005 on GitHubby David Dworkenv1.0.0Apache-2.0updated 3 months agoOfficial Claude Code Plugins
/

Plugin security-guidance from marketplace awesome-claude-code-plugins in ccplugins/awesome-claude-code-plugins. Commands read from the repo's manifest — 1 month ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Hooks (1)

  • PreToolUse

    python3 ${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py

View source on GitHub claudecodeplugins.dev

Problems found in this repo's manifests

  • "2-commit-fast" points to ./plugins/2-commit-fast, which doesn't exist in the repo — install will fail
  • "accessibility-expert" points to ./plugins/accessibility-expert, which doesn't exist in the repo — install will fail

More from ccplugins/awesome-claude-code-plugins

All 192 plugins →

stratarts

claude

27 professional business strategy skills - idea validation, market analysis, business modeling, marketing, metrics, and fundraising using proven frameworks

27 commands

1,005

craftsman

claude

Engineering-discipline toolkit: minimal-diff coding, root-cause debugging, recurring-bug detection, and honest completion reports. Ten agents, seven skills, and cross-platform hooks.

7 skills · 2 commands · 10 agents · hooks

1,005

magic-codex

claude

Parallel Codex workers inside Claude Code — multi-agent orchestration with git worktree isolation, resumable sessions, and dual-model PR review.

9 commands · 3 agents · 2 MCP servers

1,005

weft

claude

Deterministic workflow tracking with event-sourced logs for Claude Code

11 skills · hooks

1,005

bedrock

claude

Second Brain automation for Obsidian vaults — entity management, ingestion, compression, and sync via Claude Code skills

10 skills

1,005

bullpen

claude

The senior dev, unbundled: ten senior-dev instincts as skills (skeptic, closer, attacker, fact-checker, interrogator, stop-digging, doorman, historian, chameleon, explainer), each with lite/full/ultra intensity.

10 skills

1,005

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-adr

claudecodex

ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code

5 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security-guidance?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins192 plugins