claude

security-tools

Harden GitHub Actions workflows against supply-chain and injection attacks.

275 on GitHubby Fin 2xv0.2.0MITupdated 2 days ago
/

Plugin security-tools from marketplace fin-2x in intercom/2x-skills. Commands read from the repo's manifest — yesterday.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • secure-github-actions

    Harden GitHub Actions workflows against supply-chain and injection attacks when creating, modifying, or reviewing a `.github/workflows/*.yml` file. Skip for unrelated CI work (other CI providers, test harnesses, dependency pinning) that does not touch a workflow YAML. keywords: github actions, workf

Hooks (1)

  • PostToolUse

    "${CLAUDE_PLUGIN_ROOT}/hooks/secure-github-actions-auto-inject.sh"

View source on GitHub

More from intercom/2x-skills

All 7 plugins →

Meta-tools for running Claude Code well: audit your permission allowlist, fix local toolchain gaps, analyze usage costs, and prune stale saved memories.

4 skills · hooks

275

pr-tools

claude

Open well-formed GitHub pull requests from Claude Code and attach screenshots and recordings to them.

2 skills · hooks

275

Investigate and fix flaky tests across frameworks and CI systems.

1 skill · hooks

275

Strict structural and architectural code review that hunts for dramatic simplifications.

1 skill

275

Evidence-grounded root cause analysis for incidents and post-mortems.

1 skill

275

Tools for authoring and reviewing Claude Code skills.

1 skill

275

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security-tools?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins7 plugins