airtight plugin
Secure-coding gates for AI-written code: 70 numbered gates mapped to OWASP Top 10 and CWE, plus a pre-write guard that stops the write when it can prove the failure.
How to install the airtight plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add Zyoffsec/airtight-secure-coding
/plugin install airtight@airtightWhat's inside airtight
2 parts read from the plugin's own files.
Skills 1
Claude loads it when the task matches- airtight
Secure-coding gates for AI-written code. Load when writing or modifying web application code, authentication and login flows, database queries, user input handling, file uploads, or configuration and secrets — and when the user types "airtight audit", "airtight harden", or "airtight prove".
Hooks 1
Runs on these events- PreToolUsecommand
Write|Edit|MultiEdit
Using airtight in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update airtight@airtight
- Refresh the marketplace
- /plugin marketplace update airtight
- Turn it off for now
- /plugin disable airtight@airtight
- Remove it
- /plugin uninstall airtight@airtight
Skills in airtight
- airtightZyoffsec/airtight-secure-coding
Secure-coding gates for AI-written code. Load when writing or modifying web application code, authentication and login flows, database queries, user input handling, file uploads, or configuration and secrets — and when the user types "airtight audit", "airtight harden", or "airtight prove".
17 files6stars
airtight plugin questions
How do I install the airtight plugin?
In Claude Code run /plugin marketplace add Zyoffsec/airtight-secure-coding, then /plugin install airtight@airtight.
What does the airtight plugin include?
airtight bundles 1 skill, hooks.
How do I update or remove the airtight plugin?
Update it with claude plugin update airtight@airtight in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall airtight@airtight.