plugins-security-review

To audit installed Claude Code plugins for security vulnerabilities, the skill identifies enabled plugins from ~/.claude/settings.json, scans the cached files, and generates a consolidated report with severity levels, affected file paths, and actionable remediation steps.

Automated security review for Claude Code plugins is a process that scans installed plugin code, dependencies, and interactions to identify common security issues before they impact users, providing a consolidated report with severity levels and actionable remediation suggestions.

You can scan all enabled Claude Code plugins for risk at once by asking the skill to review them, which launches parallel security scans for each enabled plugin found in the cache path and aggregates the results into a consolidated report.

The security scan checks plugin source code, dependencies, and plugin interactions, aggregating all findings with severity levels and actionable remediation suggestions to address vulnerabilities comprehensively before they impact users.

The security review results are saved to the plugin reviews directory, providing a consolidated report that includes severity levels, affected file paths, descriptions, and remediation steps for each identified vulnerability.