# Claude Security

Claude Security: scan the codebase (the whole repository or a scoped part of it), scan...

- Repository: https://github.com/anthropics/claude-plugins-official (45706 stars)
- Category: Security
- License: Apache-2.0
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add anthropics/claude-plugins-official --skill claude-security -g -a claude-code -y`
Codex: `npx skills add anthropics/claude-plugins-official --skill claude-security -g -a codex -y`
Cursor: `npx skills add anthropics/claude-plugins-official --skill claude-security -g -a cursor -y`
Gemini CLI: `npx skills add anthropics/claude-plugins-official --skill claude-security -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add anthropics/claude-plugins-official`

## Description

Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the user asks to scan, audit or check code with Claude Security, to scan their changes with Claude Security, or to fix or patch Claude Security findings.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Claude Security

- Session start time (UTC): !`date -u +%Y%m%d-%H%M%S`

## The front-desk menu

This is the front desk. Its whole purpose is to work out which job the user wants and drive it, following that job's recipe.

1. **If the user already asked for a specific job**, in the arguments (`$ARGUMENTS`) or in plain text ("scan this repo", "scan my branch", "fix the findings", a bare commit sha), do that job directly and skip the menu. The recipe still asks its own single follow-up question wherever the request left one open.
2. **Otherwise, open with the menu.** Call AskUserQuestion once, single select, `header: "Job"`, `question: "What would you like to do?"`, offering exactly these three options (never invent others, the tool adds its own free-text entry). The menu is your first user-visible act; no text of any kind comes before it.

   Offer these three options:
   1. [Scan codebase](${CLAUDE_SKILL_DIR}/jobs/scan-codebase.md)
   2. [Scan changes](${CLAUDE_SKILL_DIR}/jobs/scan-changes.md)
   3. [Suggest patches](${CLAUDE_SKILL_DIR}/jobs/suggest-patches.md)

The rest: https://github.com/anthropics/claude-plugins-official/blob/HEAD/plugins/claude-security/skills/claude-security/SKILL.md