defending-code プラグイン
Security find-and-fix loop — adapted (Apache-2.0) from anthropics/defending-code-reference-harness and generalised to all vulnerability classes. Four read/write-only skills (no target-code execution): threat-model (bootstrap from code+CVEs+git-history, or interview an owner via Shostack's four questions, or both -> THREAT_MODEL.md), vuln-scan (static source review, parallel per-focus-area subagents -> VULN-FINDINGS.json), triage (adversarial N-vote verification, 16 false-positive exclusion rules, root-cause dedup, impact-on-asset x exploitability severity with stated deployment conditions, owner routing, checkpoint/resume -> TRIAGE.json), and patch (root-cause candidate diffs + independent reviewer, fix-first priority for deployment-conditional dangerous primitives, never auto-applied -> PATCHES/). The autonomous C/C++ + AddressSanitizer execution pipeline this was extracted from is referenced, not bundled (vuln-scan/HARNESS.md).
defending-code プラグインのインストール方法
両方のコマンドを Claude Code 内で実行してください。最初のコマンドで marketplace を一度追加し、2 番目のコマンドでプラグインをインストールします。
/plugin marketplace add air-gapped/skills
/plugin install defending-code@air-gapped-marketplacedefending-code の内容
プラグイン自身のファイルから読み込まれた 10 個のパーツ です。
Agent 6
@agent-defending-code:name として呼び出し- @agent-defending-code:patch-author
Patch author for one verified vulnerability finding in a patch run. Spawn with a repo path and a nonce-tagged finding block — not for general delegation.
- @agent-defending-code:patch-reviewer
Independent reviewer for one candidate security patch in a patch run. Spawn with a repo path, location, category, and nonce-tagged diff — not for general delegation.
- @agent-defending-code:triage-ranker
Severity ranker for one confirmed triage finding. Spawn with a repo path, deployment context, and finding fields — not for general delegation.
- @agent-defending-code:triage-verifier
Adversarial verifier for one scanner finding in a triage run. Spawn with a repo path, environment, and finding block — not for general delegation.
- @agent-defending-code:vuln-area-reviewer
Static security reviewer for one focus area of a vuln-scan run. Spawn with a focus area, target dir, and scoping facts — not for general delegation.
- @agent-defending-code:vuln-confidence-scorer
Second-opinion confidence scorer for one vuln-scan finding. Spawn with a finding block and target dir — not for general delegation.
SKILL 4
タスクが一致したときに Claude が読み込みます- patch
Generates candidate security fix diffs from verified findings using static analysis or execution-verified pipelines.
- threat-model
Builds a structured threat model for a codebase using interview, bootstrap, or hybrid modes to map attack surfaces and prioritize security risks.
- triage
Triages security findings by verifying authenticity, deduplicating results, and ranking them by impact and exploitability.
- vuln-scan
Performs static source-code vulnerability scans by spawning parallel subagents to review specific focus areas and generate structured findings.
Claude Code での defending-code の使用方法
Agent を名前で指定してください:
@agent-defending-code:patch-author
@agent-defending-code:patch-reviewerSKILL にコマンドは不要です。リクエストが説明と一致したときに Claude が読み込みます。
更新、オフ、または削除
- プラグインを更新 (shell)
- claude plugin update defending-code@air-gapped-marketplace
- marketplace を更新
- /plugin marketplace update air-gapped-marketplace
- 一時的にオフにする
- /plugin disable defending-code@air-gapped-marketplace
- 削除する
- /plugin uninstall defending-code@air-gapped-marketplace
defending-code のスキル
- patchair-gapped/skills
Generates candidate security fix diffs from verified findings using static analysis or execution-verified pipelines.
6件のファイル6スター - threat-modelair-gapped/skills
Builds a structured threat model for a codebase using interview, bootstrap, or hybrid modes to map attack surfaces and prioritize security risks.
9件のファイル6スター - triageair-gapped/skills
Triages security findings by verifying authenticity, deduplicating results, and ranking them by impact and exploitability.
12件のファイル6スター - vuln-scanair-gapped/skills
Performs static source-code vulnerability scans by spawning parallel subagents to review specific focus areas and generate structured findings.
5件のファイル6スター
defending-code プラグインに関する質問
defending-code プラグインをインストールするにはどうすればよいですか。
Claude Code で /plugin marketplace add air-gapped/skills を実行し、続いて /plugin install defending-code@air-gapped-marketplace を実行します。
defending-code プラグインには何が含まれていますか。
defending-code には 6 件のエージェント, 4 件のスキル が含まれています。
defending-code にはどの Agent が含まれていますか？
patch-author, patch-reviewer, triage-ranker, triage-verifier, vuln-area-reviewer, vuln-confidence-scorer です。@agent-defending-code:patch-author で呼び出せます。
defending-code プラグインを更新または削除するにはどうすればよいですか？
shell で claude plugin update defending-code@air-gapped-marketplace を使用して更新するか、/plugin の Installed タブから行ってください。削除するには /plugin uninstall defending-code@air-gapped-marketplace を使用してください。
defending-code プラグインのライセンスは何ですか？
プラグインのマニフェストに記載されている MIT です。