PlugMyPlugin
← Browse

security-guidance

anthropics ★ 44297

This Claude Code plugin provides three-layer security review for generated code: instant pattern-based regex warnings on edits, LLM-powered diff review when Claude finishes a turn, and agentic commit review that traces data flow across files to catch multi-file vulnerabilities like IDOR and auth bypass. It covers 25+ vulnerability classes including injection, XSS, SSRF, hardcoded secrets, unsafe deserialization, and path traversal.

Security Code Review No API key detected runs shell

Install

> /plugin marketplace add anthropics/claude-plugins-official/tree/HEAD/plugins/security-guidance
> /plugin install security-guidance

Source: https://github.com/anthropics/claude-plugins-official/tree/HEAD/plugins/security-guidance

What it's made of

7 hooks

Commands
0
Agents
0
Skills
0
MCP servers
0
Hooks
7 · PostToolUse, SessionStart, Stop, UserPromptSubmit

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
bash
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (anthropics).