magpie-security plugin
Apache Magpie security family (16 skills).
How to install the magpie-security plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add apache/magpie
/plugin install magpie-security@apache-magpieWhat's inside magpie-security
17 parts read from the plugin's own files.
Skills 16
Claude loads it when the task matches- cve-allocate
Walks authorized members through allocating a CVE for a tracker issue and updates the tracker with the new ID and metadata.
- issue-deduplicate
Merges two security tracking issues describing the same vulnerability while preserving reporter credits, mailing lists, and attack vectors.
- issue-fix
Fixes tracked security issues by syncing trackers, proposing plans, writing changes, and opening pull requests from a user's fork.
- issue-import
Converts security mailing list reports into tracker issues and drafts receipt replies to reporters.
- issue-import-from-md
Imports security findings from a markdown file into a tracker as individual issues in the 'Needs triage' column.
- issue-import-from-pr
Opens a security tracker from a public upstream pull request to initiate the CVE allocation and remediation workflow.
- issue-import-from-scan
Triage security scanner outputs by bucketing findings and generating reports or pull requests based on operator decisions.
- issue-import-via-forwarder
Detects security report relays from brokers and extracts reporter credit and routing rules using configured adapters.
- issue-invalidate
Closes security trackers as invalid by applying labels, posting closing comments, archiving boards, and drafting reporter replies.
- issue-sync
Synchronize security issues in a tracker with GitHub discussions, mailing threads, and upstream pull requests to propose updates.
- issue-triage
Classifies security tracker issues into specific disposition categories and proposes triage comments for team review.
- model-prepare
Drafts an initial security model for a project and submits it via a pull request including the necessary documentation chain.
- model-update
Refreshes a published security model by analyzing decision history to propose new known non-findings and identify model gaps.
- model-verify
Check a published security model per repository: is it reachable via `AGENTS.md` → `SECURITY.md` at a named commit, and does it cover the minimum-bar sections? Proposes one fix per failing check (a PR for mechanical gaps, mail to `<governance-body>` for substantive ones).
- submit-to-oss-scan
Prepares pull requests to enroll or update projects in Anthropic's OSS Scanner by generating project configuration, Dockerfiles, and threat models.
- tracker-stats-dashboard
Generates a self-contained HTML dashboard summarizing security tracker repository statistics for team review.
Hooks 1
Runs on these events- hooks
No description in the file.
Using magpie-security in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update magpie-security@apache-magpie
- Refresh the marketplace
- /plugin marketplace update apache-magpie
- Turn it off for now
- /plugin disable magpie-security@apache-magpie
- Remove it
- /plugin uninstall magpie-security@apache-magpie
Skills in magpie-security
- cve-allocateapache/magpie
Walks authorized members through allocating a CVE for a tracker issue and updates the tracker with the new ID and metadata.
7 files145stars - issue-deduplicateapache/magpie
Merges two security tracking issues describing the same vulnerability while preserving reporter credits, mailing lists, and attack vectors.
3 files145stars - issue-fixapache/magpie
Fixes tracked security issues by syncing trackers, proposing plans, writing changes, and opening pull requests from a user's fork.
9 files145stars - issue-importapache/magpie
Converts security mailing list reports into tracker issues and drafts receipt replies to reporters.
21 files145stars - issue-import-from-mdapache/magpie
Imports security findings from a markdown file into a tracker as individual issues in the 'Needs triage' column.
14 files145stars - issue-import-from-prapache/magpie
Opens a security tracker from a public upstream pull request to initiate the CVE allocation and remediation workflow.
11 files145stars - issue-import-from-scanapache/magpie
Triage security scanner outputs by bucketing findings and generating reports or pull requests based on operator decisions.
7 files145stars - issue-import-via-forwarderapache/magpie
Detects security report relays from brokers and extracts reporter credit and routing rules using configured adapters.
10 files145stars - issue-invalidateapache/magpie
Closes security trackers as invalid by applying labels, posting closing comments, archiving boards, and drafting reporter replies.
12 files145stars - issue-syncapache/magpie
Synchronize security issues in a tracker with GitHub discussions, mailing threads, and upstream pull requests to propose updates.
17 files145stars - issue-triageapache/magpie
Classifies security tracker issues into specific disposition categories and proposes triage comments for team review.
9 files145stars - model-prepareapache/magpie
Drafts an initial security model for a project and submits it via a pull request including the necessary documentation chain.
2 files145stars - model-verifyapache/magpie
Check a published security model per repository: is it reachable via `AGENTS.md` → `SECURITY.md` at a named commit, and does it cover the minimum-bar sections? Proposes one fix per failing check (a PR for mechanical gaps, mail to `<governance-body>` for substantive ones).
5 files145stars - submit-to-oss-scanapache/magpie
Prepares pull requests to enroll or update projects in Anthropic's OSS Scanner by generating project configuration, Dockerfiles, and threat models.
3 files145stars - tracker-stats-dashboardapache/magpie
Generates a self-contained HTML dashboard summarizing security tracker repository statistics for team review.
2 files145stars - model-updateapache/magpie
Refreshes a published security model by analyzing decision history to propose new known non-findings and identify model gaps.
145stars
magpie-security plugin questions
How do I install the magpie-security plugin?
In Claude Code run /plugin marketplace add apache/magpie, then /plugin install magpie-security@apache-magpie.
What does the magpie-security plugin include?
magpie-security bundles 16 skills, hooks.
How do I update or remove the magpie-security plugin?
Update it with claude plugin update magpie-security@apache-magpie in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall magpie-security@apache-magpie.
What license is the magpie-security plugin under?
Apache-2.0, as stated in the plugin's manifest.