claude-security
Scans the whole repository, a scoped part, or the changes in a branch or pull request, and can suggest patches for the findings.
- Kind
- Skill
- Works with
- Claude Code
- Source
- anthropics/claude-plugins-official @ 58267944f921
- Path
- plugins/claude-security/skills/claude-security/SKILL.md
- Jobs
- Review, Guardrails
- Topics
- Security audits, Git & pull requests
Credit
- Made by
- anthropics
- Original
- github.com/anthropics/claude-plugins-official/blob/58267944f9…
- License
- Apache-2.0
Listed by Skill Manifest; not made by us.
InstallInstall it from a plugin marketplace.
/plugin install claude-security@claude-plugins-official
Install factsScanned 2 Nov 2026
- Adds
- .claude/skills/claude-security/ (the skill folder)
- 6 file(s) the skill refers to
- Runs scripts
- Yes
- allowed-tools includes Bash
- Uses the network
- None found
- Needs secrets
- None found
- Reads environment variables
- CLAUDE_SKILL_DIR
- Source revision
- 58267944f921
- Licence
- Apache-2.0
- Last activity
- 1 Nov 2026
- Review
- Reviewed
Found by a static scan of the stored text; nothing is run. “None found” is not a guarantee, so read what you install before you run it.
- Only the main file is read; other files in the folder are not scanned
# Claude Security
- Session start time (UTC): !`date -u +%Y%m%d-%H%M%S`
## The front-desk menu
This is the front desk. Its whole purpose is to work out which job the user wants and drive it, following that job's recipe.
1. **If the user already asked for a specific job** — in the arguments (`$ARGUMENTS`) or in plain text ("scan this repo", "scan my branch", "fix the findings", a bare commit sha) — do that job directly and skip the menu. The recipe still asks its own single follow-up question wherever the request left one open.
2. **Otherwise, open with the menu.** Call AskUserQuestion once, single select, `header: "Job"`, `question: "What would you like to do?"`, offering exactly these three options (never invent others — the tool adds its own free-text entry). The menu is your first user-visible act; no text of any kind comes before it.
Offer these three options:
1. [Scan codebase](${CLAUDE_SKILL_DIR}/jobs/scan-codebase.md)
2. [Scan changes](${CLAUDE_SKILL_DIR}/jobs/scan-changes.md)
3. [Suggest patches](${CLAUDE_SKILL_DIR}/jobs/suggest-patches.md)
…