security-guidance

Name: security-guidance
Author: mrkhachaturov

mrkhachaturov ★ 0

Security-guidance is a Claude Code plugin that reviews Claude-generated code across three layers: instant pattern-based warnings on edits for dangerous patterns like unsafe deserialization and hardcoded secrets, LLM-powered diff review on Stop to catch high-severity vulnerabilities before they reach you, and an agentic commit reviewer that traces data flow across files to catch multi-file vulnerabilities like IDOR and auth bypass. It covers 25+ vulnerability classes including injection, XSS, SSRF, path traversal, and unsafe deserialization.

Security Code Review No API key detected runs shell

Install

> /plugin marketplace add mrkhachaturov/ccode-personal-plugins/tree/HEAD/plugins/security-guidance

> /plugin install security-guidance

Source: https://github.com/mrkhachaturov/ccode-personal-plugins/tree/HEAD/plugins/security-guidance

What it's made of

7 hooks

Commands: 0
Agents: 0
Skills: 0
MCP servers: 0
Hooks: 7 · PostToolUse, SessionStart, Stop, UserPromptSubmit

What it needs & plugs into

API keys: none
Paid services: none detected
External tools: bash
Talks to: nothing external detected

Analyzed 2026-11-12. Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (mrkhachaturov).