Security Guidance
Security scan passedAnthropic's security review for Claude Code: flags injection, XSS, secrets and more as Claude edits, finishes a turn and commits.
Sorted by weekly installs
18 results
Anthropic's security review for Claude Code: flags injection, XSS, secrets and more as Claude edits, finishes a turn and commits.
Equips your coding agent with SAST, dependency scanning, a phased hardening workflow and STRIDE threat-modeling skills.
Alireza Rezvani's Claude Code hook that stops Claude before it writes common security anti-patterns, such as eval, pickle or SQL f-strings.
Microsoft's skills for Azure Data Explorer: build Kusto graphs, compose IRQL threat hunts and turn results into visual graphs.
CrowdStrike's local MCP server for Falcon: your agent triages detections, looks up hosts and threat intel, and runs Next-Gen SIEM searches.
Auth0's MCP server: your agent creates apps and APIs, deploys Actions, edits forms and checks logs in your Auth0 tenant.
Sonatype's open source intelligence in your agent: vulnerabilities, licenses and the best version to pick or upgrade to.
Lets your agent look into and manage Zscaler's ZIA, ZPA, ZDX and more with your OneAPI credentials, read-only unless you allow changes.
Lets your agent manage your WorkOS workspace: organizations, users, SSO connections, Directory Sync, AuthKit branding and more.
Aikido's own plugin: scan the code your agent writes for vulnerabilities and secrets, and triage your Aikido security issues.
Lets your agent find and manage JumpCloud users, devices, groups and SSO applications, from password and MFA resets to device commands.
Bitwarden's review skills check the agents, commands, hooks, settings and CLAUDE.md in your Claude Code setup for security and quality.
JFrog's plugin for Claude Code: its MCP server plus skills for Artifactory, security audits, package curation and governed MCP installs.
Semgrep scans the code your agent writes for vulnerabilities, risky dependencies and secrets, so it can fix them before you push.
Sonar's plugin puts SonarQube in your agent's coding loop: quality gates, issues, coverage, dependency risks and secrets scanning.