security-guidance

v2.0.0

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

Claude Code

by David Dworken140.8kupdated 1 day ago

Source

$ git clone https://github.com/anthropics/claude-code

Clone the source, then follow the repository's marketplace instructions for your runtime. The plugin root is plugins/security-guidance/ inside the repository.

Layout

plugins/security-guidance/

└── .claude-plugin/plugin.json

Manifests1

plugins/security-guidance/.claude-plugin/plugin.json

{
  "name": "security-guidance",
  "version": "2.0.0",
  "description": "Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.",
  "author": {
    "name": "David Dworken",
    "email": "dworken@anthropic.com"
  },
  "homepage": "https://github.com/anthropics/claude-code/tree/main/plugins/security-guidance"
}