security-scanning

Plugin security-scanning from marketplace engineering-standards-marketplace in shah-arnav3/eng_standards-marketplace-claudecode. Commands read from the repo's manifest — 6 days ago.

Skills (6)

• backend-security

  Backend and application-layer security vulnerability scanning — injection flaws, broken authentication/authorization, insecure deserialization, SSRF, business logic flaws, and secrets management, aligned to OWASP Top 10 / ASVS. Use whenever reviewing backend/API code for security issues, designing a

• database-security

  Database-layer security vulnerability scanning — access control and least privilege, encryption at rest, backup security, audit logging, and data minimization/PII handling. Use whenever reviewing database configuration, access grants, encryption settings, or the user mentions database security, data

• dependency-audit

  Dependency and supply-chain security auditing — vulnerability scanning of third-party packages, lockfile integrity, transitive dependency risk, license compliance, and supply-chain attack patterns (typosquatting, compromised maintainers). Use whenever reviewing project dependencies, package.json/req

• frontend-security

  Frontend and client-side security vulnerability scanning — XSS, CSRF, clickjacking, insecure storage of tokens, content security policy, and third-party script risk. Use whenever reviewing frontend/client-side code for security issues, working with cookies/localStorage/tokens in the browser, or the

• network-security

  Network-layer security vulnerability scanning — TLS configuration, firewall and segmentation rules, exposed ports/services, DNS security, and API gateway/rate-limiting posture. Use whenever reviewing network architecture, firewall/security group rules, TLS configuration, or the user mentions network

• system-security

  System and host/OS-level security vulnerability scanning — least-privilege OS accounts, container hardening, patch management, filesystem permissions, and secure defaults for compute infrastructure. Use whenever reviewing server/container/OS hardening, Dockerfiles, deployment configuration, or the u

Similar plugins