security

Plugin security from marketplace indiehacker in theindiehacker/dev-plugins. Commands read from the repo's manifest — 3 days ago.

Skills (1)

• onboard

  commit・push の前の検査 (Gitleaks・Semgrep・Trivy) が通るよう、リポジトリにすでにあるシークレットと脆弱性を直す。直せない指摘は、ユーザーに確かめて理由付きで除外ファイルに書く。最後に PR を作る。使い方 → /security:onboard

Hooks (4)

• SessionStart

  bash "${CLAUDE_PLUGIN_ROOT}/scripts/setup.sh"

• PreToolUse

  bash "${CLAUDE_PLUGIN_ROOT}/scripts/in-git-files.sh" gitleaks dir . --redact --verbose --ignore-gitleaks-allow --exit-code 2

• PreToolUse

  cd "$CLAUDE_PROJECT_DIR" || exit 2; semgrep --version > /dev/null 2>&1 || exit 0; semgrep scan --config p/owasp-top-ten --metrics off --severity ERROR --error --disable-nosem 1>&2 || [ $? -ne 1 ] || e

• PreToolUse

  bash "${CLAUDE_PLUGIN_ROOT}/scripts/in-git-files.sh" trivy fs --scanners vuln,misconfig,secret --severity HIGH,CRITICAL --ignore-unfixed --exit-code 2 .