application-security plugin
Assess and harden application security: source vulnerability review, secret scanning, CodeQL scanning, STRIDE and TM7 threat models, data-breach blast radius, and GDPR engineering practices.
How to install the application-security plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add gbb-acelerators/awesome-harness-primitives
/plugin install application-security@copilot-primitives-claudeWhat's inside application-security
9 parts read from the plugin's own files.
Agents 2
Call as @agent-application-security:name- @agent-application-security:sast-sca-security-analyzer
>-
- @agent-application-security:wg-code-sentinel
>-
Skills 7
Claude loads it when the task matches- codeql
No description in the file.
- data-breach-blast-radius
No description in the file.
- gdpr-compliant
No description in the file.
- secret-scanning
No description in the file.
- security-review
No description in the file.
- threat-model-analyst
No description in the file.
- tm7-threat-model
No description in the file.
Using application-security in Claude Code
Ask for an agent by name:
@agent-application-security:sast-sca-security-analyzer
@agent-application-security:wg-code-sentinelSkills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update application-security@copilot-primitives-claude
- Refresh the marketplace
- /plugin marketplace update copilot-primitives-claude
- Turn it off for now
- /plugin disable application-security@copilot-primitives-claude
- Remove it
- /plugin uninstall application-security@copilot-primitives-claude
application-security plugin questions
How do I install the application-security plugin?
In Claude Code run /plugin marketplace add gbb-acelerators/awesome-harness-primitives, then /plugin install application-security@copilot-primitives-claude.
What does the application-security plugin include?
application-security bundles 2 agents, 7 skills.
Which agents come with application-security?
sast-sca-security-analyzer, wg-code-sentinel. Call one with @agent-application-security:sast-sca-security-analyzer.
How do I update or remove the application-security plugin?
Update it with claude plugin update application-security@copilot-primitives-claude in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall application-security@copilot-primitives-claude.
What license is the application-security plugin under?
MIT, as stated in the plugin's manifest.