Skip to main content
affpapa.org
RU EN
skill Claude Code official · Anthropic

claude-security — Claude Code skill: what it does, how to install

Scans repositories or pull request diffs for vulnerabilities and prepares verified patch files. Helpful for security audits directly inside your Claude Code session.

Install into Claude Code · Plugin marketplace All methods and platforms ↓ 
/plugin install claude-security@claude-plugins-official
Open on GitHub

What claude-security does

The skill handles three tasks: auditing an entire codebase, reviewing changes in a branch or commit, and generating fixes for discovered vulnerabilities. Under the hood, it orchestrates specialized sub-agents for inventory, research, verification, and patch generation alongside Python and Bash helper scripts.

It runs directly within your session permissions without an isolation layer. Because of this, it is built for your own trusted repositories; untrusted code should be inspected inside sandbox-runtime instead. Every finding gets validated by an independent verifier panel before landing in the report. The plugin never commits code or opens pull requests on its own, leaving changes as patch files for you to review.

Install it if you want automated vulnerability checks on your branches while keeping full manual control over any code modifications.

What it helps with

  • scan an entire repository for vulnerabilities
  • check security issues in branch diffs or specific commits
  • produce verified patch files for identified security flaws
  • review security findings through structured reports

Example prompts for the agent

  • scan this repo
  • scan my branch
  • fix the findings

How to install claude-security

1Plugin marketplace

/plugin install claude-security@claude-plugins-official

This installs the whole claude-security plugin with all its skills

2Skills CLI (Vercel)

npx skills add anthropics/claude-plugins-official --skill claude-security -a claude-code

3Manually: put the files in place

~/.claude/skills/claude-security/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/claude-security/

From the same set37

The whole set →
code-reviewer official Anthropic Reviews code changes against CLAUDE.md project rules and flags material defects. Run it before a commit or pull request. Claude Code 31,050installs code-reviewer official Anthropic This subagent checks code changes for bugs, security issues, and project-rule violations. Use it when a review should focus on findings that matter. Claude Code 31,050installs claude-md-improver official Anthropic This skill audits CLAUDE.md files, produces a quality report, and suggests focused edits. Use it when project instructions need a careful review. Claude Code 12,558installs security-auditor official Anthropic This subagent searches code for security flaws and gives engineers concrete fixes. Use it to review a project before hardening or modernization work. Claude Code 10,718installs test-engineer official Anthropic This subagent captures legacy behavior in tests and compares it with a rewritten implementation. Use it before changing existing modules. Claude Code 9,715installs claude-automation-recommender official Anthropic Analyzes a codebase and recommends Claude Code hooks, subagents, skills, plugins, and MCP servers. Useful when setting up a project or refining an existing workflow. Claude Code 9,057installs playground official Anthropic Builds interactive HTML playgrounds with controls, a live preview, and a generated prompt. Use it when a topic is easier to explore visually than through plain text. Claude Code 7,967installs agent-development official Anthropic This skill guides you through creating agents for Claude Code plugins, from trigger conditions to system prompts and tool access. Use it when adding a subagent to a plugin. Claude Code 7,353installs

Similar

gke-manifest-generation official google Creates and updates Kubernetes manifests for GKE Autopilot and Standard. Use it when defining app resources, health checks, or network routes. Claude Code Gemini CLI CX Codex 4,600installs security-review official github Reviews code and dependencies for vulnerabilities, exposed secrets, and access-control flaws. Use it before a release or when auditing a project path. GitHub Copilot 5,500installs golang-dependency-management samber This skill manages Go dependencies, version conflicts, module audits, and vulnerability checks. Use it when changing go.mod or reviewing a package before adoption. Claude Code CX Codex Cursor +1 39,700installs compliance-tracking official anthropics Tracks compliance requirements and audit readiness across SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, helping structure control data for upcoming audits. Claude Code CX Codex Cursor +1 3,000installs deployment-pipeline-design Seth Hobson Design CI/CD stages, release gates, and rollback plans with this skill. Use it when setting up canary releases or promoting builds across environments. Claude Code CX Codex Cursor 13,758installs secrets-management Seth Hobson This skill sets up secrets handling for CI/CD with Vault, AWS Secrets Manager, and platform stores. Use it for credentials, rotation, and protected deployments. Claude Code CX Codex Cursor 13,122installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs

Questions about claude-security

How do I install claude-security in Claude Code?

Run /plugin install claude-security@claude-plugins-official in Claude Code, or install it with npx skills add anthropics/claude-plugins-official --skill claude-security -a claude-code.

What does claude-security do?

It audits codebases or diffs for security vulnerabilities, evaluates findings through an agent verifier panel, and produces patch files for manual application.

Does claude-security apply fixes automatically?

No, it never commits code, pushes branches, or opens pull requests. It saves suggested fixes as patch files on disk for the developer to inspect and apply.

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor