← Browse
pre-ship-security-red-team
arm-pz ★ 0
A Claude Code plugin that runs 14 authorization and abuse checks (IDOR, role escalation, XSS, SSRF, etc.) against a web app you own, records evidence of each failure, applies fixes, and reruns with negative controls to verify the remediation. The plugin uses three isolated subagents with synthetic test accounts, enforces safety gates to prevent unauthorized testing, and outputs a before-and-after results table with a ship/no-ship verdict.
Install
> /plugin marketplace add arm-pz/pre-ship-security-red-team
> /plugin install pre-ship-security-red-team
Source: https://github.com/arm-pz/pre-ship-security-red-team
What it's made of
no extra components
- Commands
- 0
- Agents
- 0
- Skills
- 0
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (arm-pz).