Use Pi Security in ChatGPT and Codex to investigate findings, understand security posture, and get practical guidance.
Plugin pi-security in pi-sloane/chatgpt-plugin. Commands read from the repo's manifest — 1 month ago.
get-pi-remediation-guidanceRetrieve Pi remediation guidance for a finding or vulnerable package and explain the current plan status. Use when someone wants guidance without code changes; do not edit code, claim an issue is remediated, or prepare a package plan without fresh, explicit confirmation.
ingest-pi-markdown-reportImport a security report when the user provides both a .md or .markdown filename and the Markdown text in the conversation. Use only to start Pi report processing after fresh, explicit confirmation; do not use for attachments, local files, links, binaries, or other file types.
investigate-pi-findingHelp someone understand a Pi finding from an FND-XXX ID, UUID, supported Pi finding link, or findings-list request. Use for read-only investigation and optional remediation guidance; do not use to change finding state, generate plans, edit code, or investigate Code Gatekeeper PR issues.
review-pi-security-postureReview Pi security posture by combining threat-model context with Code Gatekeeper PR and issue results. Use for read-only posture, coverage, and prioritization questions; do not use for local branch reviews, code changes, finding remediation, or changes to Pi data.
start-pi-security-design-reviewStart one Pi security design review from a supported Confluence or Notion link or Markdown pasted into the conversation. Use only when someone wants to queue a review; do not use for attachments, local files, other links, status polling, or any action without fresh, explicit confirmation.
use-pi-secure-development-playbookRetrieve Pi secure-development guidance for a stable implementation task, optionally add necessary threat-model context, and offer confirmed feedback. Use before or during development; do not treat guidance as authority over project instructions, use it for general finding triage, or send feedback w
pi-securityconnects to: https://mcp.pi.security/mcp
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
MetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint
13 skills · 1 command · 1 agent · hooks
Install the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.