claude-security-linter
Plugin Author v1.0.0
A pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval() usage, Function constructor abuse, hardcoded API keys and secre...
From the developer
Works with
Claude Code
Description
From the marketplace listing
A pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval() usage, Function constructor abuse, hardcoded API keys and secrets, Bearer tokens, AWS credentials, innerHTML/outerHTML XSS vectors, inline private keys, and GitHub personal access tokens. Uses a two-tier severity system: errors block the write with detailed remediation guidance, while warnings allow the write but inject advisory context. Runs as pure Node.js wi...
What changed
No changes recorded yet. Follow this plugin to keep track of future changes.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prom...
Shared terms: detect, scan, hook, security
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and ...
Shared terms: scan, vulnerabilitie, security, code
-
Semgrep Guardian: Scans agent-generated code for security vulnerabilities.
Shared terms: scan, vulnerabilitie, security, code
-
Real-time security filter for MCP tool communications. Works as a Claude Code hook to inspect all data sent to and received from MCP serv...
Shared terms: detect, hook, security, api
-
Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command inje...
Shared terms: hardcoded, scan, security, api
Keywords
Files & skills
claude-security-linter · catalog manifest
Saved declaration
{}
claude-security-linter · catalog manifest
Saved declaration
{
"name": "claude-security-linter",
"source": {
"sha": "93e5ef25ec53479f91478152917ac426970d8730",
"url": "https://github.com/its-animay/claude-security-linter.git",
"source": "url"
},
"homepage": "https://github.com/its-animay/claude-security-linter",
"description": "A pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval() usage, Function constructor abuse, hardcoded API keys and secrets, Bearer tokens, AWS credentials, innerHTML/outerHTML XSS vectors, inline private keys, and GitHub personal access tokens. Uses a two-tier severity system: errors block the write with detailed remediation guidance, while warnings allow the write but inject advisory context. Runs as pure Node.js wi..."
}
security-linter · catalog manifest
Saved declaration
{
"name": "security-linter",
"author": {
"name": "Plugin Author"
},
"version": "1.0.0",
"keywords": [
"security",
"linter",
"eval",
"api-keys",
"xss"
],
"description": "Pre-tool-use security linter that blocks code containing eval(), Function constructor abuse, hardcoded API keys, Bearer tokens, AWS credentials, and innerHTML assignments before they are written to disk."
}
plugin.json observed Nov 6, 2026 · 10:42 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
Installation instructions
Community
/plugin marketplace add anthropics/claude-plugins-community
/plugin install claude-security-linter@claude-communityTechnical details
- Sources
- Community
- First seen
- Oct 3, 2026 · 22:13 UTC
- Last seen
- Nov 9, 2026 · 12:07 UTC
- Latest observed change
- Oct 3, 2026 · 22:13 UTC
- Collection status
- Listed
- Reported installs
- Not provided
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.