← Browse
security-guidance
anthropics ★ 636
Three-layer security review for Claude-generated code: pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that traces data flow across files to catch injection, XSS, SSRF, hardcoded secrets, and 25+ vulnerability classes. Uses Anthropic's Claude models (Opus 4.7 by default) to review diffs and trace security issues before code is committed.
💲 Anthropic free runs shell
Install
> /plugin marketplace add anthropics/claude-code/tree/main/plugins/security-guidance
> /plugin install security-guidance
Source: https://github.com/anthropics/claude-code/tree/main/plugins/security-guidance
What it's made of
6 hooks
- Commands
- 0
- Agents
- 0
- Skills
- 0
- MCP servers
- 0
- Hooks
- 6 · PostToolUse, SessionStart, Stop, UserPromptSubmit
What it needs & plugs into
- API keys
- none
- Paid services
- Anthropic
- External tools
bash- Talks to
- nothing external detected
Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (anthropics).