plugin-security-checker

Scan Claude Code plugins for security vulnerabilities and insecure patterns.

6|Updated Oct 18, 2025

Search Tags:#Claude Code #MITRE ATT&CK #threat-intelligence #security-scanner #ATLAS #plugin-security-checker #STIX

Ready to run

npx skills add https://github.com/diegocconsolini/ClaudeSkillCollection --skill plugin-security-checker

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: plugin-security-checker
Source: https://github.com/diegocconsolini/ClaudeSkillCollection/tree/main/claude-desktop-skills/plugin-security-checker
Command: npx skills add https://github.com/diegocconsolini/ClaudeSkillCollection --skill plugin-security-checker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires psutil, stix2, taxii2-client, mitreattack-python, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides automated security analysis for Claude Code plugins, dramatically reducing manual review time by detecting vulnerabilities, code obfuscation, and insecure patterns across plugin manifests, agents, and scripts.

Core Features & Use Cases

91 specialized pattern agents: Detect vulnerabilities, obfuscation, credential leaks, and anti-patterns across Python and JavaScript code.
Threat intelligence enrichment: MITRE ATT&CK/ATLAS mappings, STIX bundles, and cross-framework risk scoring to contextualize findings.
Auditable outputs: Markdown/HTML reports and threat intelligence exports to support audits and pre-install reviews.

Quick Start

Use the plugin-security-checker to scan a Claude Code plugin directory, then review the generated JSON/Markdown/HTML reports in the output location.

Frequently Asked Questions about plugin-security-checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Claude Code plugins for security vulnerabilities?▼

Security scanning for Claude Code plugins identifies vulnerabilities, code obfuscation, and insecure patterns across manifests, Python/JavaScript code, and agents. Run the plugin-security-checker on your plugin directory to generate JSON, HTML, and Markdown reports with detailed findings and risk scores.

What security patterns does a plugin scanner detect?▼

Plugin scanners detect 91 specialized vulnerability patterns including credential leaks, obfuscation techniques, anti-patterns in Python and JavaScript, unsafe API usage, and configuration weaknesses. Results map findings to MITRE ATT&CK and ATLAS frameworks for threat context.

Can I use MITRE ATT&CK threat intelligence with plugin security analysis?▼

Yes. Plugin-security-checker enriches findings with MITRE ATT&CK and ATLAS mappings, STIX bundles, and cross-framework risk scoring to contextualize vulnerabilities and support compliance audits and pre-install reviews.

How do I export plugin security findings for audit compliance?▼

Export plugin security analysis results as JSON, Markdown, or HTML reports with MITRE ATT&CK and ATLAS threat intelligence exports. Auditable outputs support pre-install reviews, security audits, and risk documentation.

What are the resource limits for scanning large plugin codebases?▼

Plugin security scanning enforces a 500MB memory limit with Bloom filter and Trie validation for near-zero false positives. Adaptive routing by file type optimizes performance across manifests, scripts, and agent configurations.

How does consensus voting improve plugin security scanning accuracy?▼

Consensus voting across 91 specialized pattern agents reduces false positives and ensures high-confidence vulnerability detection. Combined with Bloom filter and Trie validation, this approach delivers auditable security findings with minimal noise.