PlugMyPlugin
← Browse

trustwarden

revenantworks ★ 2

trustwarden vets third-party skills, plugins, MCP servers, and GitHub Actions before installation, using multiple optional scanners (skillspector, zizmor, pinact, OpenSSF Scorecard) to produce a verdict (PASS, CONDITIONAL, HOLD, FAIL) with install terms tied to Claude Code's controls. It lists all files and their scanner coverage, requiring a second scanner agreement for a PASS verdict, but never installs or runs the candidate.

Security DevOps No API key detected prompt pack

Install

> /plugin marketplace add revenantworks/claude-skills/tree/HEAD/featured/trustwarden
> /plugin install trustwarden

Source: https://github.com/revenantworks/claude-skills/tree/HEAD/featured/trustwarden

What it's made of

1 skill

Commands
0
Agents
0
Skills
1
MCP servers
0
Hooks
0

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
none
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (revenantworks).