Secure defaults and a write-time check while generating code, an audit that cites real incidents, and a blocking pre-deploy gate. Built from 2016-2026 breach analysis.
Plugin security-checklist from marketplace cyber-security-checklist in sogangCSmaster/cyber-security-checklist. Commands read from the repo's manifest — 1 month ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
secure-by-defaultSecure defaults to apply while writing application code — authentication, database access and row-level security, API endpoints, file uploads, secrets and environment variables, dependencies, and AI agent or MCP wiring. Use whenever generating or modifying code that handles user data, credentials, a
security-auditAudit existing code for the security failures that actually cause breaches, and cite the real incident behind every finding. Use when asked to review code or a pull request for security, check whether an app is safe to launch, find vulnerabilities, audit secrets or exposed keys, check database acces
ship-gateA blocking go/no-go gate to run immediately before deploying, launching, or making an application public. Checks the small set of failures that account for most real breaches and returns a clear SHIP or DO NOT SHIP verdict, with evidence for every gate. Use when about to deploy to production, publis
command -v python3 >/dev/null 2>&1 || exit 0; exec python3 "${CLAUDE_PLUGIN_ROOT}/skills/security-audit/scripts/scan.py" --hook
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.