claude-security
Skill OfficialThe Claude Security menu — pick a job: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you cho
Install
git clone https://github.com/anthropics/claude-plugins-public.git ~/.claude/skills/claude-securityWhat is claude-security?
The Claude Security menu — pick a job: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose).
What this can do
Capabilities declared in this component's own frontmatter — not inferred.
Run shell commands
Declares Bash
Create and modify files
Declares Write or Edit
~76 tokens of context used while enabled, before you invoke anything
All declared tools (8)
AgentAskUserQuestionBashGlobGrepReadWorkflowWriteTrust
94/100 · Excellent1 factor scored below maximum
Documentation
README · ~3 min readClaude Security
- Session start time (UTC, the stamp report directories are named with): !
date -u +%Y%m%d-%H%M%S
The front-desk menu
This is the front desk. Its whole purpose is to work out which job the user wants and drive it, following that job's recipe.
-
If the user already asked for a specific job — in the arguments (
$ARGUMENTS) or in plain text ("scan this repo", "scan my branch", "fix the findings", a bare commit sha) — do that job directly and skip the menu. The recipe still asks its own single follow-up question wherever the request left one open. -
Otherwise, open with the menu. Call AskUserQuestion once, single select,
header: "Job",question: "What would you like to do?", offering exactly these three options (never invent others — the tool adds its own free-text entry). The menu is your first user-visible act; no text of any kind comes before it.Offer these three options:
Reviews
Log in to leave a review.
No reviews yet — be the first.
Explore related
Other things in this space — across every part of the ecosystem, not just skills.
Skillssimilar to this one
All skills →gstack
Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA
125.1K stars
mem0
Universal memory layer for AI Agents
62K stars
awesome-copilot
Community-contributed instructions, agents, skills, and configurations to help you make the most of GitHub Copilot.
37.2K stars
Plugins
All plugins →superpowers
Superpowers teaches Claude brainstorming, subagent driven development with built in code review, systematic debugging, and red/green TDD. Additionally, it teaches Claude how to author and test new skills.
263.6K stars
ponytail
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
92K stars
code-review
Automated code review for pull requests using multiple specialized agents with confidence-based scoring to filter false positives
32.9K stars
MCP Servers
All mcp servers →Commands
All commands →Subagents
All subagents →code-reviewer
Use this agent when you need to review code for adherence to project guidelines, style guides, and best practices. This agent should be used proactively after writing or modifying code, especially before committing changes or creating pull requests. It will check for style violations, potential issu
32.8K stars
agent-creator
Use this agent when the user asks to "create an agent", "generate an agent", "build a new agent", "make me an agent that...", or describes agent functionality they need. Trigger when user wants to create autonomous agents for plugins. Examples: <example> Context: User wants to create a code review a
32.8K stars
code-simplifier
Use this agent when code has been written or modified and needs to be simplified for clarity, consistency, and maintainability while preserving all functionality. This agent should be triggered automatically after completing a coding task or writing a logical chunk of code. It simplifies code by fol
32.8K stars
Hooks
All hooks →PostToolUse (Edit|Write|MultiEdit|NotebookEdit)
Security guidance plugin — pattern-based warnings on edits, git-diff-based LLM review on stop
Stop
Security guidance plugin — pattern-based warnings on edits, git-diff-based LLM review on stop
PostToolUse (Bash)
Security guidance plugin — pattern-based warnings on edits, git-diff-based LLM review on stop