Agent Skills Index

Directory / Claude community plugins (Anthropic) / security-sweep

security-sweep

plugin Security

Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command injection, SSRF), authentication issues (JWT misuse, weak password hashing)misconfigurations (CORS, debug mode, insecure TLS, Docker/K8s), dependency risks, AI-specific vulnerabilities (prompt injection, API key exposure, excessive agent permissions), mobile security issues (Android/iOS), and data exposure (PII in logs, weak crypto). Covers OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Supports Python, JavaScript/TypeScript, Java/Kotlin, Go, Ruby, PHP, C#, Swift, and Dart with framework-aware checks that reduce false positives.
Description from the marketplace entry / plugin manifest.

Information source

Copied from the Claude community plugins (Anthropic) catalog (anthropics/claude-plugins-community), maintained by Anthropic (community submissions).

Links are pinned to commit 06ec7b6 (2026-10-13), the version we synced. Not reviewed by us.

Install

Add the marketplace (once, in Claude Code)
/plugin marketplace add anthropics/claude-plugins-community
In a Claude Code session
/plugin install security-sweep@claude-community
From your shell
claude plugin install security-sweep@claude-community

Commands follow each host's documentation (Claude Code, Claude Cowork docs). gh skill needs GitHub CLI 2.90 or later and is in public preview.

Listed from Anthropic (community submissions)'s catalog, not reviewed by us. Read the source before installing.

Catalog
Claude community plugins (Anthropic) (claude-community)
Information source
marketplace.json in anthropics/claude-plugins-community
Author
Not stated in the source
Source code
Onome-AJ/security-sweep-plugin
Homepage
github.com/Onome-AJ/security-sweep-plugin#readme
License
MIT (repository license)
Repository stars
13 for Onome-AJ/security-sweep-plugin
Added to catalog
2026-04-07
Last change
2026-04-05 (last push to the repo)

What it contains

Hosted in an external repository, so contents are not counted here. See the source link.

Similar in Security