defending-code 플러그인
Security find-and-fix loop — adapted (Apache-2.0) from anthropics/defending-code-reference-harness and generalised to all vulnerability classes. Four read/write-only skills (no target-code execution): threat-model (bootstrap from code+CVEs+git-history, or interview an owner via Shostack's four questions, or both -> THREAT_MODEL.md), vuln-scan (static source review, parallel per-focus-area subagents -> VULN-FINDINGS.json), triage (adversarial N-vote verification, 16 false-positive exclusion rules, root-cause dedup, impact-on-asset x exploitability severity with stated deployment conditions, owner routing, checkpoint/resume -> TRIAGE.json), and patch (root-cause candidate diffs + independent reviewer, fix-first priority for deployment-conditional dangerous primitives, never auto-applied -> PATCHES/). The autonomous C/C++ + AddressSanitizer execution pipeline this was extracted from is referenced, not bundled (vuln-scan/HARNESS.md).
defending-code 플러그인 설치 방법
두 명령을 모두 Claude Code 안에서 실행하십시오. 첫 번째는 마켓플레이스를 한 번 추가하고, 두 번째는 플러그인을 설치합니다.
/plugin marketplace add air-gapped/skills
/plugin install defending-code@air-gapped-marketplacedefending-code 구성 요소
플러그인 파일에서 읽어온 10개의 항목입니다.
Agents 6
@agent-defending-code:name 으로 호출- @agent-defending-code:patch-author
Patch author for one verified vulnerability finding in a patch run. Spawn with a repo path and a nonce-tagged finding block — not for general delegation.
- @agent-defending-code:patch-reviewer
Independent reviewer for one candidate security patch in a patch run. Spawn with a repo path, location, category, and nonce-tagged diff — not for general delegation.
- @agent-defending-code:triage-ranker
Severity ranker for one confirmed triage finding. Spawn with a repo path, deployment context, and finding fields — not for general delegation.
- @agent-defending-code:triage-verifier
Adversarial verifier for one scanner finding in a triage run. Spawn with a repo path, environment, and finding block — not for general delegation.
- @agent-defending-code:vuln-area-reviewer
Static security reviewer for one focus area of a vuln-scan run. Spawn with a focus area, target dir, and scoping facts — not for general delegation.
- @agent-defending-code:vuln-confidence-scorer
Second-opinion confidence scorer for one vuln-scan finding. Spawn with a finding block and target dir — not for general delegation.
Skills 4
작업이 일치하면 Claude가 로드합니다- patch
Generates candidate security fix diffs from verified findings using static analysis or execution-verified pipelines.
- threat-model
Builds a structured threat model for a codebase using interview, bootstrap, or hybrid modes to map attack surfaces and prioritize security risks.
- triage
Triages security findings by verifying authenticity, deduplicating results, and ranking them by impact and exploitability.
- vuln-scan
Performs static source-code vulnerability scans by spawning parallel subagents to review specific focus areas and generate structured findings.
Claude Code에서 defending-code 사용하기
이름으로 agent를 요청하세요:
@agent-defending-code:patch-author
@agent-defending-code:patch-reviewerSkills는 명령어가 필요하지 않습니다. 요청이 설명과 일치하면 Claude가 이를 읽습니다.
업데이트, 비활성화 또는 삭제
- 플러그인 업데이트 (shell)
- claude plugin update defending-code@air-gapped-marketplace
- marketplace 새로고침
- /plugin marketplace update air-gapped-marketplace
- 일시적으로 비활성화
- /plugin disable defending-code@air-gapped-marketplace
- 삭제
- /plugin uninstall defending-code@air-gapped-marketplace
defending-code의 스킬
- patchair-gapped/skills
Generates candidate security fix diffs from verified findings using static analysis or execution-verified pipelines.
6개 파일6스타 - threat-modelair-gapped/skills
Builds a structured threat model for a codebase using interview, bootstrap, or hybrid modes to map attack surfaces and prioritize security risks.
9개 파일6스타 - triageair-gapped/skills
Triages security findings by verifying authenticity, deduplicating results, and ranking them by impact and exploitability.
12개 파일6스타 - vuln-scanair-gapped/skills
Performs static source-code vulnerability scans by spawning parallel subagents to review specific focus areas and generate structured findings.
5개 파일6스타
defending-code 플러그인 질문
defending-code 플러그인은 어떻게 설치하나요?
Claude Code에서 /plugin marketplace add air-gapped/skills를 실행한 다음 /plugin install defending-code@air-gapped-marketplace을 실행하십시오.
defending-code 플러그인에는 무엇이 포함되나요?
defending-code은(는) 6개 에이전트, 4개 스킬을(를) 묶습니다.
defending-code에는 어떤 agent가 포함되어 있나요?
patch-author, patch-reviewer, triage-ranker, triage-verifier, vuln-area-reviewer, vuln-confidence-scorer입니다. @agent-defending-code:patch-author로 호출하세요.
defending-code 플러그인을 어떻게 업데이트하거나 삭제하나요?
shell에서 claude plugin update defending-code@air-gapped-marketplace를 사용하여 업데이트하거나 /plugin의 Installed 탭에서 수행하세요. 삭제하려면 /plugin uninstall defending-code@air-gapped-marketplace을 사용하세요.
defending-code 플러그인의 라이선스는 무엇인가요?
플러그인 manifest에 명시된 대로 MIT입니다.