insecure-defaults plugin
Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production
How to install the insecure-defaults plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add trailofbits/skills
/plugin install insecure-defaults@trailofbitsWhat's inside insecure-defaults
1 part read from the plugin's own files.
Commands 1
Run as /insecure-defaults:name- /insecure-defaults:audit
No description in the file.
Using insecure-defaults in Claude Code
Type a command in a Claude Code session:
/insecure-defaults:auditUpdate, turn off or remove
- Update the plugin (shell)
- claude plugin update insecure-defaults@trailofbits
- Refresh the marketplace
- /plugin marketplace update trailofbits
- Turn it off for now
- /plugin disable insecure-defaults@trailofbits
- Remove it
- /plugin uninstall insecure-defaults@trailofbits
insecure-defaults plugin questions
How do I install the insecure-defaults plugin?
In Claude Code run /plugin marketplace add trailofbits/skills, then /plugin install insecure-defaults@trailofbits.
What does the insecure-defaults plugin include?
insecure-defaults bundles 1 command.
What commands does the insecure-defaults plugin add?
It adds /insecure-defaults:audit. Run them in Claude Code with the plugin prefix, for example /insecure-defaults:audit.
How do I update or remove the insecure-defaults plugin?
Update it with claude plugin update insecure-defaults@trailofbits in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall insecure-defaults@trailofbits.