How to install the ghost plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add ghostsecurity/skills
/plugin install ghost@ghost-securityWhat's inside ghost
7 parts read from the plugin's own files.
Skills 7
Claude loads it when the task matches- proxy
Capture, inspect, search, and replay HTTP/HTTPS traffic using a CLI-based man-in-the-middle proxy for security testing.
- repo-context
Scans directory structures to detect projects, map dependencies, and generate a comprehensive repository overview in a repo.md file.
- report
Aggregates findings from dependency, secrets, and code scans into a single prioritized security report.
- scan-code
Performs SAST code scanning to identify security vulnerabilities like SQL injection, XSS, and BOLA in applications and libraries.
- scan-deps
Scans dependency lockfiles for known vulnerabilities and CVEs to generate security findings and remediation guidance.
- scan-secrets
Scans codebases for leaked API keys, tokens, passwords, and other sensitive credentials to generate security findings and remediation guidance.
- validate
Validates security vulnerability findings by tracing data flows, verifying exploit conditions, and performing live testing to determine true or false positives.
Using ghost in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update ghost@ghost-security
- Refresh the marketplace
- /plugin marketplace update ghost-security
- Turn it off for now
- /plugin disable ghost@ghost-security
- Remove it
- /plugin uninstall ghost@ghost-security
Skills in ghost
- ghost-repo-contextghostsecurity/skills
Scans directory structures to detect projects, map dependencies, and generate a comprehensive repository overview in a repo.md file.
4 files441stars - ghost-reportghostsecurity/skills
Aggregates findings from dependency, secrets, and code scans into a single prioritized security report.
2 files441stars - ghost-scan-codeghostsecurity/skills
Performs SAST code scanning to identify security vulnerabilities like SQL injection, XSS, and BOLA in applications and libraries.
12 files441stars - ghost-scan-depsghostsecurity/skills
Scans dependency lockfiles for known vulnerabilities and CVEs to generate security findings and remediation guidance.
10 files441stars - ghost-scan-secretsghostsecurity/skills
Scans codebases for leaked API keys, tokens, passwords, and other sensitive credentials to generate security findings and remediation guidance.
9 files441stars - ghost-validateghostsecurity/skills
Validates security vulnerability findings by tracing data flows, verifying exploit conditions, and performing live testing to determine true or false positives.
2 files441stars - ghost-proxyghostsecurity/skills
Capture, inspect, search, and replay HTTP/HTTPS traffic using a CLI-based man-in-the-middle proxy for security testing.
441stars
ghost plugin questions
How do I install the ghost plugin?
In Claude Code run /plugin marketplace add ghostsecurity/skills, then /plugin install ghost@ghost-security.
What does the ghost plugin include?
ghost bundles 7 skills.
How do I update or remove the ghost plugin?
Update it with claude plugin update ghost@ghost-security in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall ghost@ghost-security.