claude-security Claude Code Plugin
Claude Code Plugin Claude Code Security Security, Auth & ComplianceClaude Code Customization & WorkflowCode Quality, Review & TestingThe explanation below is AI-generated. Please verify it against the sources.
claude-security is a Claude Code plugin that performs vulnerability scanning of a codebase entirely inside a Claude Code session, without any separate service or background process. It provides three main actions from its menu: scanning a whole repository or a chosen portion of it, scanning a branch diff, pull request diff, or single commit for new issues, and turning confirmed findings from a report into suggested patch files. Each potential finding is checked by independent verifier agents that attempt to disprove it, so only confirmed issues make it into the final report, and the level of verification performed is tallied by code rather than self-reported by the model. Suggested fixes are written as patch files for the user to review and apply, with no automatic application, commit, or push. The plugin operates under the user's own session permissions and treats any text found in the repository, including embedded instructions, strictly as data to analyze rather than commands to obey.
What you can do with claude-security
- Run a full-repository scan or a scan scoped to specific directories
- Scan a branch diff, a pull request diff, or a single commit for new vulnerabilities
- Let the plugin propose an appropriate scan scope and effort level based on the repository's size and context, or specify these yourself
- Receive a timestamped output folder with a human-readable report, a machine-readable JSONL file, and a revision record tied to the exact commit scanned
- Ask for suggested patches for confirmed findings, which pass through a separate agent review before being generated
- Manually decide whether to apply the generated patches, commit them, or turn them into a pull request, since the plugin does not do this automatically
Sources
History of claude-security
- Claude Code Plugin Added claude-security