claude

spec-security-review

Structured, evidence-based security reviews: SAST, SCA, authorization, XSS, supply-chain and AI/LLM tracks, with exact files, lines, impact and remediation. Read-only by default.

3 on GitHubby Trackmindv0.1.0MITupdated 23 days agosecurity
/

Plugin spec-security-review from marketplace trackmind in trackmind-ai/marketplace. Commands read from the repo's manifest — 22 days ago.

What it installs

Skills (1)

  • spec-security-review

    Performs reusable SAST, SCA, authorization, XSS, supply-chain, and AI/LLM security reviews. Use when the user asks for a security audit, SCA, SAST, access-control review, XSS review, dependency review, OWASP review, release security assessment, or secure remediation plan.

View source on GitHub

More from trackmind-ai/marketplace

All 4 plugins →

Agent-driven SDLC platform. Takes a requirement to production-ready code through governed pipelines: versioned specs, approval gates, and ordered quality gates across a four-layer capability model (platform, stacks, organization, project).

89 skills · hooks

3

automaqa

claude

Installs and verifies a complete E2E toolchain (Playwright for web, Maestro for mobile), then drives spec-driven test authoring, live verification, and versioned HTML reporting.

9 skills · 1 agent · hooks

3

Grades MCP (Model Context Protocol) servers against a published 28-rule quality rubric.

1 skill

3

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain spec-security-review?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins4 plugins