# aikido

Wires Aikido Security into Claude through its MCP server, so the agent can scan the code it writes or edits for vulnerabilities and leaked secrets.

- plugin · `type=plugin` · Claude Code · ★ 14
- Author: AikidoSec
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/AikidoSec/aikido-claude-plugin
- Updated: 2026-10-19
- HTML: https://affpapa.org/en/nevibecode/plugins/aikido

## What it does

The aikido plugin registers the Aikido Security MCP server inside Claude. From there the agent scans code it just wrote or changed, looking for vulnerabilities, exposed secrets and IaC misconfigurations. You can also pull findings from your own Aikido feed without leaving the session.

The scanning itself happens on Aikido's side, so a working connection to the service comes first. Setup steps live in Aikido's own guide for Claude — walk through that before expecting results in the chat.

It ships through Anthropic's official marketplace, which means two commands and no hand-edited config files. If your project already runs a security pipeline, check whether it now overlaps with what the agent does.

## Install

### Claude Code (native platform)

**Plugin marketplace**
In the agent chat (not a shell):
```text
/plugin install aikido@claude-plugins-official
```
In the agent chat (not a shell):
```text
/plugin marketplace add anthropics/claude-plugins-official
```

## When to use it
- scan fresh code for vulnerabilities before committing
- catch secrets and API keys that slipped into a file
- pull open findings from your Aikido feed into the session
- spot misconfigurations in IaC files
- run a security scan without leaving Claude

## Example prompts
- Scan this file for vulnerabilities with Aikido
- Check my recent changes for leaked secrets
- Show open findings from my Aikido feed

## Similar
- [security-review](https://affpapa.org/en/nevibecode/skills/security-review.md) — skill · 5500 installs
- [agentic-security-scanner](https://affpapa.org/en/nevibecode/skills/agentic-security-scanner.md) — skill · 462 installs
- [hardcoded-secret-detection](https://affpapa.org/en/nevibecode/skills/hardcoded-secret-detection.md) — skill · ★ 7121
- [ghost-report](https://affpapa.org/en/nevibecode/skills/ghost-report.md) — skill · 3800 installs
- [sast-scanning](https://affpapa.org/en/nevibecode/skills/sast-scanning.md) — skill · 372 installs
- [secrets-scan](https://affpapa.org/en/nevibecode/skills/owasp-secrets-scan.md) — skill · 337 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md