Agent Plugins Marketplace
← All plugins

security-assessment

v3.7.5

Deep security assessment + adversarial ML red-team: SARIF-first tool orchestration, narrowly-scoped LLM agents, FP-reduction with fallback banner, compliance mapping, service-comm diagramming, and a self-owned-target red-team harness. Companion plugin to dev-team.

Claude Code3 Skills

By finsterb281 GitHub starsUpdated 2 weeks ago

Directory evidence

Runtimes
Claude Code
Parsed components
3 skill or MCP entries
Source updated
Sep 9, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install security-assessment for Claude Code

Installs for the current user
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install security-assessment@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/bdfinst/agentic-dev-team

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/security-assessment/.

Plugin files

plugins/security-assessment/
├── .claude-plugin/plugin.json
├── skills/compliance-mapping/SKILL.md
├── skills/false-positive-reduction/SKILL.md
└── skills/security-assessment-pipeline/SKILL.md

Included Skills3

compliance-mappingskills/compliance-mapping/SKILL.md

Pattern-table mapping from unified findings to regulatory citations (PCI-DSS, GDPR, HIPAA, SOC2). LLM edge annotator invoked only for llm_review_trigger=true rows.

false-positive-reductionskills/false-positive-reduction/SKILL.md

Hybrid FP-reduction — joern when present, LLM fallback when absent. Six-stage rubric (Stage 0 + Stages 1-5) applied to every finding; emits the disposition register.

security-assessment-pipelineskills/security-assessment-pipeline/SKILL.md

Declarative phase graph for /security-assessment. Phases run in fixed order with dependency enforcement; per-phase artifacts land in memory/ and feed the next phase.

Plugin manifests1

plugins/security-assessment/.claude-plugin/plugin.json
{
  "name": "security-assessment",
  "version": "3.7.5",
  "description": "Deep security assessment + adversarial ML red-team: SARIF-first tool orchestration, narrowly-scoped LLM agents, FP-reduction with fallback banner, compliance mapping, service-comm diagramming, and a self-owned-target red-team harness. Companion plugin to dev-team.",
  "author": {
    "name": "finsterb",
    "email": ""
  },
  "required-primitives-contract": "^1.0.0",
  "depends-on": [
    {
      "name": "dev-team",
      "minimum-version": "3.3.0"
    }
  ]
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[security-assessment on Agent Plugins Marketplace](https://pluginsmp.com/plugins/security-assessment)