sec
This plugin inventories the supply chain of open projects (npm, pnpm, yarn, uv, poetry, pip lockfiles; GitHub actions; MCP servers) and the local machine (Claude Code, plugins, MCP, npm global, pipx, Node, Homebrew), then checks each dependency against the OSV and Aikido Intel malware database. It separates findings by poisoned packages, known vulnerabilities, open ports, and outdated software, delivering a checkbox report and automatically fixing only flagged items.
Install
Source: https://github.com/pedroberaldo87/pedro-plugins/tree/HEAD/plugins/sec
What it's made of
1 skill
- Commands
- 0
- Agents
- 0
- Skills
- 1
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- Aikido Intel
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (pedroberaldo87).