plugin CX Codex

security-scanning — Claude Code plugin: vulnerability scanning

Q: How do I install security-scanning in Claude?

Add the marketplace with `/plugin marketplace add wshobson/agents`, then install the plugin: `/plugin install security-scanning@claude-code-workflows`.

A Claude plugin that checks your code for vulnerabilities: SAST, dependency scanning, container checks and OWASP Top 10 compliance.

Install into Claude Code · Plugin marketplace All methods and platforms ↓

/plugin marketplace add wshobson/agents
/plugin install security-scanning@claude-code-workflows

Open on GitHub

What security-scanning does

The plugin adds a set of security checks to Claude. It runs static analysis (SAST), looks for known vulnerabilities in dependencies, scans containers, and maps findings to the OWASP Top 10. A separate part handles automated hardening: the agent suggests edits to configs and code.

Installation goes through the wshobson/agents marketplace. The plugin is MIT-licensed, by Seth Hobson. Claude and Cursor are listed as supported platforms alongside Claude.

It does not replace a full audit. The plugin works with what it can see in the repository, so secrets kept in environment variables and production settings outside project files stay out of scope. If the project has no dependency manifests or Dockerfile, some checks have nothing to analyse.

What it helps with

find vulnerabilities in code before release
check dependencies for known CVEs
map a project against OWASP Top 10 requirements
scan a Docker image for security issues
get hardening suggestions for configs

Example prompts for the agent

scan the project for vulnerabilities and show a report
check dependencies for known CVEs
compare the code against OWASP Top 10 and suggest fixes

How to install security-scanning

Plugin marketplace

/plugin marketplace add wshobson/agents

/plugin install security-scanning@claude-code-workflows

Step by step, with commands for each platform: Claude Code plugins: marketplaces, installing, and building your own

Questions about security-scanning

How do I install security-scanning in Claude?

Add the marketplace with /plugin marketplace add wshobson/agents, then install the plugin: /plugin install security-scanning@claude-code-workflows.

What does security-scanning do?

It runs SAST analysis, finds vulnerabilities in dependencies, scans containers, checks OWASP Top 10 compliance and suggests hardening edits.

Which platforms does the plugin support?

Claude, Claude and Cursor are listed.

Source text

security-scanning · MIT

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

Similar plugins

All plugins for Security →

security tartinerlabs Checks dependencies for CVEs, scans the working tree and git history for secrets, wires a scanner into pre-commit, and runs an OWASP pass over the repo. CX Codex +1 531installs vulnerability-scanning aj-geddes A skill that walks your agent through finding vulnerabilities in dependencies, code, containers and secrets. Useful before deploys and during security audits. CX Codex +1 611installs ghost-report ghostsecurity Merges findings from every Ghost Security scan skill into a single report ranked by risk and confidence. Handy before a release or an audit. CX Codex +1 3,800installs ghost-scan-code ghostsecurity Finds security flaws in source code: SQL injection, XSS, SSRF and other OWASP categories. Plans the scans first, then runs them per project. CX Codex +1 5,200installs diff-scanning-with-aws-security-agent aws Runs a fast AWS Security Agent scan over only the code changed since a git ref. Handy before a commit or a pull request. CX Codex +1 1,500installs scanning-with-aws-security-agent aws Runs repository scans using managed AWS Security Agent service by uploading code to S3. Returns ranked findings with code locations and remediation steps. CX Codex +1 1,500installs

From the same set342

The whole set →