claude

secure-coding

Use when writing or fixing code that handles untrusted input, when choosing safe APIs for SQL, shell, and file access, when implementing password hashing, session tokens, and output encoding, when managing secrets and dependencies, and when you need each practice mapped to its CWE so findings line up with code review and web testing.

0 on GitHubby Muhammad Izaz Haiderv1.0.0MITupdated 16 days agoengineering
/

Plugin secure-coding from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.

What it installs

Skills (5)

  • secure-coding

    Use when writing or fixing code that handles untrusted input, when choosing safe APIs for SQL, shell, and file access, when implementing password hashing, session tokens, and output encoding, when managing secrets and dependencies, and when you need each practice mapped to its CWE so findings line u

  • authz-checks

    Use when writing or reviewing code that decides who may do

  • input-validation-patterns

    Use when writing or reviewing code that accepts user input

  • output-encoding

    Use when rendering untrusted data into HTML, JavaScript,

  • secret-handling

    Use when code needs API keys, passwords, tokens, or

View source on GitHub

More from mizazhaider-ceh/AgentArsenal

All 353 plugins →

web-sqli

claude

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

0

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

0

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

0

web-xss

claude

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

0

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

0

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

0

Similar plugins

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

superpowers

claudecodex

Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques

15 skills · hooks

obra/superpowers 316,836

claude-mem

claudecodex

Persistent memory for Claude Code: the next session starts where the last one left off.

29 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

career-ops

claudecodex

Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications

5 skills · hooks

career-ops-hq/career-ops 82,253

mem0

claudecodex

Cross-session memory and token savings for coding agents.

6 skills · 1 agent · 1 MCP server · hooks

mem0ai/mem0 68,893

context7

claudecodex

Up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your coding agent's context.

1 MCP server

upstash/context7 64,709

Maintain secure-coding?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins353 plugins