PlugMyPlugin
← Browse

security-guidance

alirezarezvani ★ 28593

The security-guidance plugin is a PreToolUse hook that intercepts and warns about 12 common security anti-patterns (command injection, XSS, SQL injection, unsafe deserialization, code injection, and GitHub Actions workflow injection) before they execute in code edit operations. It uses session-state caching to prevent duplicate warnings and automatically cleans up stale state after 30 days.

Security Code Review No API key detected runs shell

Install

> /plugin marketplace add alirezarezvani/claude-skills/tree/HEAD/engineering/security-guidance
> /plugin install security-guidance

Source: https://github.com/alirezarezvani/claude-skills/tree/HEAD/engineering/security-guidance

What it's made of

1 skill · 1 hook

Commands
0
Agents
0
Skills
1
MCP servers
0
Hooks
1 · PreToolUse

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
python3
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (alirezarezvani).