jar-analyzer-plugin

Name: jar-analyzer-plugin
Author: jar-analyzer

jar-analyzer ★ 140

This Claude Code plugin performs static analysis and security auditing on Java JAR/WAR packages by building SQLite databases and detecting common vulnerability patterns including RCE, SQL injection, SSRF, and deserialization flaws. It provides method call chain tracing from dangerous sinks to HTTP entry points, Spring component analysis, and sensitive string detection using an embedded FernFlower decompiler.

Security Code Review free prompt pack

Install

> /plugin marketplace add jar-analyzer/jar-analyzer-claude/tree/HEAD/plugins/jar-analyzer-plugin

> /plugin install jar-analyzer-plugin

Source: https://github.com/jar-analyzer/jar-analyzer-claude/tree/HEAD/plugins/jar-analyzer-plugin

What it's made of

2 skills

Commands: 0
Agents: 0
Skills: 2
MCP servers: 0
Hooks: 0

What it needs & plugs into

API keys: none
Paid services: none detected
External tools: none
Talks to: nothing external detected

Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (jar-analyzer).