dotclaude

Plugin security ยท 3 skills, 1 agent, 1 command

security

Security review toolkit: OWASP-aligned code review, dependency and secret auditing skills, a security-auditor agent, and a full-codebase /security-audit command.

owaspauditsecretsdependencies

Install

Add the marketplace once, then install the bundle. Claude Code namespaces its commands (/security:name), wires any hooks, and updates it with /plugin marketplace update dotclaude.

/plugin marketplace add KhaledSaeed18/dotclaude
/plugin install security@dotclaude

What you get

Skills (3)

  • dependency-auditAudit a project's dependencies for outdated and vulnerable packages and surface breaking-change notes for upgrades. Works with any ecosystem, including...
  • owasp-securityReview code being written or modified against the OWASP Top 10:2025 and ASVS secure-coding requirements, in any language or stack, catching vulnerability...
  • secret-scanScan code or a diff for hardcoded secrets (API keys, tokens, passwords, private keys, and other exposed credentials) before they get committed or shipped....

Agents (1)

  • security-auditorUse this agent when you need a comprehensive security audit of a codebase, module, API surface, or pull request. Covers OWASP Top 10:2025, auth logic...

Commands (1)

  • security-auditRun a full-codebase security audit covering OWASP Top 10:2025 vulnerability classes, auth logic, secret handling, input validation, dependency CVEs, and...