security-toolkit

Name: security-toolkit
Author: bogheorghiu

bogheorghiu ★ 2

This Claude Code plugin ships threat-detection and dangerous-action-blocking hooks that guard against accidental mistakes—prompt injection in tool outputs, risky git operations, and unsafe Desktop Commander calls—plus optional skills for post-compromise Windows/WSL triage and repository-level PII/secret blocking via git hooks and CI integration. The hooks operate on pattern matching (not a sandbox), the PR-merge guard is opt-in, and the pii-gate skill enforces a gitignored denylist template so no leaked terms ever reach version control.

Security DevOps No API key detected runs shell

Install

> /plugin marketplace add bogheorghiu/ex-cog-dev/tree/HEAD/security-toolkit

> /plugin install security-toolkit

Source: https://github.com/bogheorghiu/ex-cog-dev/tree/HEAD/security-toolkit

What it's made of

1 command · 3 skills · 5 hooks

Commands: 1
Agents: 0
Skills: 3
MCP servers: 0
Hooks: 5 · PostToolUse, PreToolUse, SessionStart

What it needs & plugs into

API keys: none
Paid services: none detected
External tools: announce-pr-merge-guard.sh block-dangerous-git.sh block-dc-config.sh block-dc-execute.sh detect-prompt-injection.sh
Talks to: nothing external detected

Analyzed 2026-11-10. Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (bogheorghiu).