security-engineering plugin
Applied security framework for cryptographic primitive selection, chain-of-trust design, authentication factor analysis, supply-chain trust, and physical-threat modeling. Complements OWASP-style application audits.
How to install the security-engineering plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add jmagly/aiwg
/plugin install security-engineering@aiwgWhat's inside security-engineering
30 parts read from the plugin's own files.
Agents 2
Call as @agent-security-engineering:name- @agent-security-engineering:applied-cryptographer
No description in the file.
- @agent-security-engineering:secure-bootstrap-reviewer
No description in the file.
Skills 28
Claude loads it when the task matches- auth-factor-design
No description in the file.
- banned-api-audit
No description in the file.
- binary-blob-audit
No description in the file.
- bun-release-age-gate
No description in the file.
- cargo-supply-chain-audit
No description in the file.
- chain-of-trust-design
No description in the file.
- ci-workflow-audit
No description in the file.
- committer-2fa-audit
No description in the file.
- confusable-unicode-audit
No description in the file.
- crypto-primitive-selection
No description in the file.
- degraded-mode-design
No description in the file.
- deprecation-policy
No description in the file.
- dfir-readiness
No description in the file.
- fuzzing-in-ci
No description in the file.
- host-hardening
No description in the file.
- npm-release-age-gate
No description in the file.
- npm-supply-chain-audit
No description in the file.
- physical-threat-modeling
No description in the file.
- pnpm-release-age-gate
No description in the file.
- sanitizer-in-ci
No description in the file.
- secret-handling-runtime
No description in the file.
- security-disclosure-track
No description in the file.
- security-engineering-quickref
No description in the file.
- security-report
No description in the file.
- strict-toolchain-audit
No description in the file.
- supply-chain-hardening-quickstart
No description in the file.
- supply-chain-trust
No description in the file.
- yarn-release-age-gate
No description in the file.
Using security-engineering in Claude Code
Ask for an agent by name:
@agent-security-engineering:applied-cryptographer
@agent-security-engineering:secure-bootstrap-reviewerSkills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update security-engineering@aiwg
- Refresh the marketplace
- /plugin marketplace update aiwg
- Turn it off for now
- /plugin disable security-engineering@aiwg
- Remove it
- /plugin uninstall security-engineering@aiwg
security-engineering plugin questions
How do I install the security-engineering plugin?
In Claude Code run /plugin marketplace add jmagly/aiwg, then /plugin install security-engineering@aiwg.
What does the security-engineering plugin include?
security-engineering bundles 2 agents, 28 skills.
Which agents come with security-engineering?
applied-cryptographer, secure-bootstrap-reviewer. Call one with @agent-security-engineering:applied-cryptographer.
How do I update or remove the security-engineering plugin?
Update it with claude plugin update security-engineering@aiwg in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall security-engineering@aiwg.