claudecodex

semgrep

Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.

0 on GitHubby Semgrepv2.5.4updated 5 months agosecurity
/

Plugin semgrep from marketplace claude-plugins-official in rothwellmawela-cyber/Claude-plugin. Commands read from the repo's manifest — 1 month ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use and it starts local MCP servers. The exact commands are listed below; read them before installing.

What it installs

Skills (3)

  • add-and-validate-guardian-developer-semgrep-rule

    write a custom semgrep rule with the user, add it to guardian in either user or repo scope, and prove it fires by writing a file that should trip it. use when someone wants guardian to catch something it currently misses, asks to write or add a semgrep rule, or wants a project convention enforced on

  • install-mfw

    Install the mfw (Semgrep Malware Firewall) CLI via the curl|sh installer and walk the user through setup — trust store, PATH shims, shell integration, and the background daemon — asking questions at real decision points. Detects when the user's shell rc files are *managed* (symlinked into nix / home

  • remove-guardian-developer-semgrep-rule

    Remove a custom Semgrep rule from Guardian — list what is installed, work out which file holds the rule, and delete or edit it out of the user or repo rules directory. Use when someone wants Guardian to stop flagging something, asks to remove, delete or disable a custom rule, or wants to clear room

MCP servers (1)

  • guardian

    runs: ${CLAUDE_PLUGIN_ROOT}/scripts/hook claude mcp

Hooks (7)

  • PreToolUse

    "${CLAUDE_PLUGIN_ROOT}/scripts/hook" auto PreToolUse

  • PostToolUse

    "${CLAUDE_PLUGIN_ROOT}/scripts/hook" auto PostToolUse

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/hook" auto SessionStatus

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/hook" auto SessionStart

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/hook" auto Update

  • Stop

    "${CLAUDE_PLUGIN_ROOT}/scripts/hook" auto Stop

  • SessionEnd

    "${CLAUDE_PLUGIN_ROOT}/scripts/hook" auto SessionEnd

View source on GitHub

Problems found in this repo's manifests

  • "autofix-bot" points to ./external_plugins/autofix-bot, which doesn't exist in the repo — install will fail

More from rothwellmawela-cyber/Claude-plugin

All 162 plugins →

posthog

claudecodex

Access PostHog analytics, feature flags, experiments, error tracking, and insights directly from Claude Code.

161 skills · 3 commands · 1 agent · 1 MCP server · hooks

0

zscaler

claude

Manage Zscaler cloud security platform including ZPA (private access), ZIA (internet access), ZDX (digital experience), ZCC (client connector), EASM (attack surface), and Z-Insights (analytics). Create and manage policies, troubleshoot connectivity, audit security configurations, and investigate incidents across the full Zscaler ecosystem.

42 skills · 20 commands · 1 MCP server

0

zoom-plugin

claude

Claude plugin for planning, building, and debugging Zoom integrations across REST APIs, SDKs, webhooks, bots, and MCP workflows.

47 skills · 7 MCP servers

0

vercel

claude

Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.

42 skills · 5 commands · 3 agents · 1 MCP server · hooks

0

azure

claude

Transform Claude into an Azure expert. This plugin integrates the Azure MCP server and specialized Azure skills to move beyond generic advice. It enables Claude to perform real-world tasks: listing resources, validating deployments, diagnosing infrastructure issues, and optimizing costs across 50+ Azure services.

48 skills · 1 MCP server

0

cockroachdb

claude

Connect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.

34 skills · 3 agents · 3 MCP servers · hooks

0

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

AAS Security Engineer

codex

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain semgrep?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins162 plugins