security-guidance

What it does

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

Get started

In Claude Code, open /plugin > Discover and search for this plugin, or run the command below in the Claude Code prompt. Review the publisher requirements before connecting accounts or granting access.

/plugin install security-guidance@claude-plugins-official

Copy command

Publisher-documented command. Review the linked setup guide before running it.

Open setup guide

Setup takes place on the publisher’s site. Some tools require accounts, API keys, a compatible host or paid services. Review permissions before connecting.

Plugin components

Components found in the publisher’s source. This is a partial inventory; other components may be included.

• Hook event: PostToolUse
• Hook event: SessionStart
• Hook event: Stop
• Hook event: UserPromptSubmit

Source checked 2026-10-14. Partial inventory of component definitions found in a pinned publisher source snapshot; custom paths and dynamically loaded components may be omitted. Names identify definition files or configuration keys, not guaranteed invocation names. Installation and runtime behavior not tested.

Inspect plugin source

Sources & verification

Listed in the official Claude Code marketplace; source location and installation syntax supplied by the marketplace. Installation and runtime behavior not tested.

Original project Metadata source

Source checked 2026-10-14. This is not a security certification or a guarantee that installation will work in your environment.