Nov 10, 2026 · 06:11 UTC
Catalogs → Official updated; open the comparison for details.
Github → Version: “2.0.18” → “2.0.19”
Anthropic v2.0.19
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and...
From the developer
Claude Code
From the marketplace listing
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
Nov 10, 2026 · 06:11 UTC
Catalogs → Official updated; open the comparison for details.
Github → Version: “2.0.18” → “2.0.19”
Nov 7, 2026 · 12:00 UTC
Manifest → Version: “2.0.17” → “2.0.18”
Nov 7, 2026 · 06:00 UTC
Catalogs → Knowledge work updated; open the comparison for details.
Nov 7, 2026 · 00:08 UTC
Catalogs → Official updated; open the comparison for details.
Github → Version: “2.0.17” → “2.0.18”
Oct 28, 2026 · 12:09 UTC
Catalogs → Demo updated; open the comparison for details.
Catalogs → Knowledge work updated; open the comparison for details.
Oct 27, 2026 · 18:00 UTC
Web → Id: “wf.6972992d4f368cde2b5f3229” → “directoryPlugin.30660c6c-4a3b-4c48-84d6-917f249343d9”
Web → Made by: “Anthropic” → “not provided”
Web → Subheading: “Security hook warns about command injection, XSS, and unsafe code patterns when editing files” → “Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an a...”
Oct 27, 2026 · 06:00 UTC
Catalogs → Official updated; open the comparison for details.
Github → Version: “2.0.16” → “2.0.17”
Oct 22, 2026 · 06:00 UTC
Catalogs → Knowledge work updated; open the comparison for details.
Oct 22, 2026 · 00:00 UTC
Catalogs → Official updated; open the comparison for details.
Github → Version: “2.0.15” → “2.0.16”
Oct 21, 2026 · 00:00 UTC
Catalogs → Knowledge work updated; open the comparison for details.
Catalogs → Official updated; open the comparison for details.
Github → Version: “2.0.14” → “2.0.15”
Oct 19, 2026 · 18:00 UTC
Catalogs → Knowledge work updated; open the comparison for details.
Oct 16, 2026 · 00:00 UTC
Catalogs → Official updated; open the comparison for details.
Github → Version: “2.0.13” → “2.0.14”
Find competitors to follow as you develop your plugin.
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection,...
Shared terms: agentic, generated, secret, security
Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command inje...
Shared terms: hardcoded, injection, secret, ssrf
Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypa...
Shared terms: injection, vulnerability, xss, security
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
Shared terms: secret, vulnerability, security, code
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, an...
Shared terms: security, code, agentic, edit
{
"name": "security-guidance",
"author": {
"name": "Anthropic",
"email": "support@anthropic.com"
},
"source": "./plugins/security-guidance",
"version": "2.0.19",
"category": "security",
"homepage": "https://github.com/anthropics/claude-plugins-official/tree/main/plugins/security-guidance",
"description": "Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes."
}
{
"name": "security-guidance",
"author": {
"name": "Anthropic",
"email": "support@anthropic.com"
},
"source": {
"ref": "main",
"url": "https://github.com/anthropics/claude-plugins-official.git",
"path": "plugins/security-guidance",
"source": "git-subdir"
},
"category": "security",
"description": "Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes."
}
{
"name": "security-guidance",
"source": {
"ref": "main",
"sha": "c07c748f1c680734a813eefd909bc073f8a9103f",
"url": "https://github.com/anthropics/claude-plugins-official.git",
"path": "plugins/security-guidance",
"source": "git-subdir"
},
"category": "security",
"homepage": "https://github.com/anthropics/claude-plugins-official/tree/main/plugins/security-guidance",
"description": "Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.",
"displayName": "Security Guidance"
}
{
"name": "security-guidance",
"author": {
"name": "David Dworken",
"email": "dworken@anthropic.com"
},
"version": "2.0.18",
"homepage": "https://github.com/anthropics/claude-plugins-official/tree/main/plugins/security-guidance",
"description": "Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes."
}
plugin.json observed Nov 7, 2026 · 11:15 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
/plugin marketplace add anthropics/claude-code
/plugin install security-guidance@claude-code-plugins
/plugin install security-guidance@claude-plugins-official
/plugin marketplace add anthropics/knowledge-work-plugins
/plugin install security-guidance@knowledge-work-plugins
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.