claude

security-audit

Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 41 reference guides, PreToolUse warnings. By Netresearch.

53 on GitHubby Netresearch DTT GmbHv2.11.11(MIT AND CC-BY-SA-4.0)updated yesterday

Not in a marketplace yet, so it loads for one session with --plugin-dir.

Plugin security-audit in netresearch/security-audit-skill. Commands read from the repo's manifest — yesterday.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • security-audit

    Use when conducting security assessments — OWASP Top 10 / API / LLM, CWE Top 25, CVSS scoring — auditing PHP/TYPO3, APIs, frontend, Terraform/K8s/Docker IaC, AWS cloud, AI agent configs, or scanning dependencies.

Hooks (1)

  • PreToolUse

    uv run --offline "${CLAUDE_PLUGIN_ROOT}/scripts/check_risky_command.py" || true

View source on GitHub

Maintain security-audit?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex pluginslisted