penthera plugin
Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.
How to install the penthera plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add danoszz/penthera
/plugin install penthera@pentheraWhat's inside penthera
1 part read from the plugin's own files.
Skills 1
Claude loads it when the task matches- penthera
Offline cyber security agent for the user's own apps and AI coding tools, run locally with the Penthera CLI; open R&D, measured in public. Sets it up in one command ("set up penthera in this repo"). Scans the user's own live URL and repo (TLS, headers, auth, OpenAPI, secrets incl. AI keys, opt-in injection); checks npm and Python dependencies offline ("is this dependency safe?", "what changed in my deps?", "install X safely", "any AGPL in our deps?"); blocks secrets and risky agent config before commit ("add a pre-commit hook"); audits AI tooling ("audit my MCP servers / skills / hooks", "check this skill before I install it"); fixes findings on a local branch and re-scans to verify ("scan and fix my app"); writes reports and evidence ("report for my auditor / manager", NIS2, SARIF, baseline diff). Use when the user asks to scan, audit, harden, fix, or review the security of their own app, staging URL, localhost, repo, dependencies, or agent setup. Do NOT use for targets without explicit authorization.
Using penthera in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update penthera@penthera
- Refresh the marketplace
- /plugin marketplace update penthera
- Turn it off for now
- /plugin disable penthera@penthera
- Remove it
- /plugin uninstall penthera@penthera
Skills in penthera
- pentheradanoszz/penthera
Offline cyber security agent for the user's own apps and AI coding tools, run locally with the Penthera CLI; open R&D, measured in public. Sets it up in one command ("set up penthera in this repo"). Scans the user's own live URL and repo (TLS, headers, auth, OpenAPI, secrets incl. AI keys, opt-in injection); checks npm and Python dependencies offline ("is this dependency safe?", "what changed in my deps?", "install X safely", "any AGPL in our deps?"); blocks secrets and risky agent config before commit ("add a pre-commit hook"); audits AI tooling ("audit my MCP servers / skills / hooks", "check this skill before I install it"); fixes findings on a local branch and re-scans to verify ("scan and fix my app"); writes reports and evidence ("report for my auditor / manager", NIS2, SARIF, baseline diff). Use when the user asks to scan, audit, harden, fix, or review the security of their own app, staging URL, localhost, repo, dependencies, or agent setup. Do NOT use for targets without explicit authorization.
8 files107stars
penthera plugin questions
How do I install the penthera plugin?
In Claude Code run /plugin marketplace add danoszz/penthera, then /plugin install penthera@penthera.
What does the penthera plugin include?
penthera bundles 1 skill.
How do I update or remove the penthera plugin?
Update it with claude plugin update penthera@penthera in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall penthera@penthera.
What license is the penthera plugin under?
MIT, as stated in the plugin's manifest.