security-skills plugin
4 security skills: agent security scanning, CodeQL/Semgrep, sandbox hardening, secret protection
How to install the security-skills plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add itallstartedwithaidea/agent-skills
/plugin install security-skills@googleadsagent-skillsWhat's inside security-skills
4 parts read from the plugin's own files.
Skills 4
Claude loads it when the task matches- agent-security-scanning
Detects vulnerabilities in AI-generated code using static analysis, dependency scanning, and agent-specific threat modeling.
- codeql-semgrep
Integrates static analysis into agent workflows for deep vulnerability detection, custom rule authoring, and automated code review enforcement.
- sandbox-hardening
Isolates agent execution environments using container sandboxing, permission boundaries, resource limits, and network segmentation.
- secret-protection
Prevents credential leaks through pre-commit hooks, CI/CD scanning, and runtime redaction of secrets in logs and agent outputs.
Using security-skills in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update security-skills@googleadsagent-skills
- Refresh the marketplace
- /plugin marketplace update googleadsagent-skills
- Turn it off for now
- /plugin disable security-skills@googleadsagent-skills
- Remove it
- /plugin uninstall security-skills@googleadsagent-skills
Skills in security-skills
- agent-security-scanningitallstartedwithaidea/agent-skills
Detects vulnerabilities in AI-generated code using static analysis, dependency scanning, and agent-specific threat modeling.
44stars - codeql-semgrepitallstartedwithaidea/agent-skills
Integrates static analysis into agent workflows for deep vulnerability detection, custom rule authoring, and automated code review enforcement.
44stars - sandbox-hardeningitallstartedwithaidea/agent-skills
Isolates agent execution environments using container sandboxing, permission boundaries, resource limits, and network segmentation.
44stars - secret-protectionitallstartedwithaidea/agent-skills
Prevents credential leaks through pre-commit hooks, CI/CD scanning, and runtime redaction of secrets in logs and agent outputs.
44stars
security-skills plugin questions
How do I install the security-skills plugin?
In Claude Code run /plugin marketplace add itallstartedwithaidea/agent-skills, then /plugin install security-skills@googleadsagent-skills.
What does the security-skills plugin include?
security-skills bundles 4 skills.
How do I update or remove the security-skills plugin?
Update it with claude plugin update security-skills@googleadsagent-skills in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall security-skills@googleadsagent-skills.