security-scanning plugin
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
How to install the security-scanning plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add wshobson/agents
/plugin install security-scanning@claude-code-workflowsWhat's inside security-scanning
10 parts read from the plugin's own files.
Commands 3
Run as /security-scanning:name- /security-scanning:security-dependencies
No description in the file.
- /security-scanning:security-hardening
No description in the file.
- /security-scanning:security-sast
No description in the file.
Agents 2
Call as @agent-security-scanning:name- @agent-security-scanning:security-auditor
No description in the file.
- @agent-security-scanning:threat-modeling-expert
No description in the file.
Skills 5
Claude loads it when the task matches- attack-tree-construction
No description in the file.
- sast-configuration
No description in the file.
- security-requirement-extraction
No description in the file.
- stride-analysis-patterns
No description in the file.
- threat-mitigation-mapping
No description in the file.
Using security-scanning in Claude Code
Type a command in a Claude Code session:
/security-scanning:security-dependencies
/security-scanning:security-hardening
/security-scanning:security-sastAsk for an agent by name:
@agent-security-scanning:security-auditor
@agent-security-scanning:threat-modeling-expertSkills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update security-scanning@claude-code-workflows
- Refresh the marketplace
- /plugin marketplace update claude-code-workflows
- Turn it off for now
- /plugin disable security-scanning@claude-code-workflows
- Remove it
- /plugin uninstall security-scanning@claude-code-workflows
security-scanning plugin questions
How do I install the security-scanning plugin?
In Claude Code run /plugin marketplace add wshobson/agents, then /plugin install security-scanning@claude-code-workflows.
What does the security-scanning plugin include?
security-scanning bundles 3 commands, 2 agents, 5 skills.
What commands does the security-scanning plugin add?
It adds /security-scanning:security-dependencies, /security-scanning:security-hardening, /security-scanning:security-sast. Run them in Claude Code with the plugin prefix, for example /security-scanning:security-dependencies.
Which agents come with security-scanning?
security-auditor, threat-modeling-expert. Call one with @agent-security-scanning:security-auditor.
How do I update or remove the security-scanning plugin?
Update it with claude plugin update security-scanning@claude-code-workflows in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall security-scanning@claude-code-workflows.