claude-security

Plugin claude-security from marketplace kael-odin-plugins-zh in kael-odin/claude-plugins-zh. Commands read from the repo's manifest — today.

Skills (1)

• claude-security

  Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the use

Subagents (9)

• claude-security

  The Claude Security orchestrator, for use only as the main agent of a session (claude --agent claude-security:claude-security), where it runs a scan end to end and can turn its findings into targeted patch files, each verified by a panel of agents. Never dispatch it as a subagent: it cannot scan fro

• explore

  Read-only code explorer that the plugin's other agents dispatch to map a codebase — locate files, trace how a flow is wired, find every caller of a symbol, answer "where does X happen".

• patch-generator

  Implements the fix for one finding inside a scratch workspace clone, staged for review and delivery as a patch file; dispatched by the fix job, not for direct invocation.

• patch-verifier

  The single verifier per fix round — reviews the workspace's staged diff against the finding, runs the tests, and states the three confidence claims a patch file must earn; dispatched by the fix job, not for direct invocation.

• scan-inventory

  Restricted read-only repository cartographer dispatched by the Claude Security scan workflow to partition the tree into components and account for every top-level directory; not for direct invocation or vulnerability research.

• scan-loader

  Restricted read-only loader dispatched by the Claude Security scan workflow to return one JSON file from the run directory; not for direct invocation.

• scan-redactor

  Restricted agent dispatched by the Claude Security scan jobs to replace the credential values in a finished scan's report files with [REDACTED]; not for direct invocation.

• scan-researcher

  Restricted read-only vulnerability researcher dispatched by the Claude Security scan workflow; not for direct invocation or general exploration.

• scan-verifier

  Restricted read-only verifier dispatched by the Claude Security scan workflow to vote on one candidate finding; not for direct invocation.

Hooks (6)

• UserPromptExpansion

  sh "${CLAUDE_PLUGIN_ROOT}/hooks/hooks.sh" banner

• PostToolUse

  sh "${CLAUDE_PLUGIN_ROOT}/hooks/hooks.sh" metrics || true

• PostToolUse

  sh "${CLAUDE_PLUGIN_ROOT}/hooks/hooks.sh" tip push || true

• PostToolUse

  sh "${CLAUDE_PLUGIN_ROOT}/hooks/hooks.sh" tip pr || true

• PostToolUseFailure

  sh "${CLAUDE_PLUGIN_ROOT}/hooks/hooks.sh" metrics || true

• PermissionRequest

  sh "${CLAUDE_PLUGIN_ROOT}/hooks/hooks.sh" unanswered || true

Similar plugins