{"slug":"security-sweep","title":"security-sweep","description":"Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command injection, SSRF), authentication issues (JWT misuse, weak password hashing)misconfigurations  (CORS, debug mode, insecure TLS, Docker/K8s), dependency risks, AI-specific vulnerabilities (prompt injection, API key exposure, excessive agent  permissions), mobile security issues (Android/iOS), and data exposure (PII in logs, weak crypto). Covers OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Supports Python, JavaScript/TypeScript, Java/Kotlin, Go, Ruby, PHP, C#, Swift, and Dart with framework-aware checks that reduce false\npositives.","developer":"onomeaj","category":null,"reported_installs":null,"active":true,"first_seen_at":"2026-10-03T22:13:33.942Z","last_seen_at":"2026-11-07T00:08:29.147Z","last_changed_at":"2026-10-03T22:13:33.942Z","platform":"claude","sources":["Community"],"works_with":["Claude Code"],"marketplace_url":null,"repository_url":"https://github.com/Onome-AJ/security-sweep-plugin.git","web_data":{},"github_data":{},"catalog_sources":{"community":[{"name":"security-sweep","source":{"sha":"6ca48b6ef582b5c6050e717202b3e35fa575449c","url":"https://github.com/Onome-AJ/security-sweep-plugin.git","source":"url"},"homepage":"https://github.com/Onome-AJ/security-sweep-plugin#readme","description":"Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command injection, SSRF), authentication issues (JWT misuse, weak password hashing)misconfigurations  (CORS, debug mode, insecure TLS, Docker/K8s), dependency risks, AI-specific vulnerabilities (prompt injection, API key exposure, excessive agent  permissions), mobile security issues (Android/iOS), and data exposure (PII in logs, weak crypto). Covers OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Supports Python, JavaScript/TypeScript, Java/Kotlin, Go, Ruby, PHP, C#, Swift, and Dart with framework-aware checks that reduce false\npositives."}]},"manifest":{"url":"https://raw.githubusercontent.com/Onome-AJ/security-sweep-plugin/6ca48b6ef582b5c6050e717202b3e35fa575449c/.claude-plugin/plugin.json","payload":{"name":"security-sweep","author":{"url":"https://github.com/onomeaj","name":"onomeaj"},"skills":"./skills/","license":"MIT","version":"1.0.0","homepage":"https://github.com/onomeaj/security-sweep-plugin","keywords":["security","vulnerability-scanner","owasp","secrets-detection","sast","code-audit","injection","xss","sql-injection","mobile-security","ai-security"],"repository":"https://github.com/onomeaj/security-sweep-plugin","description":"Comprehensive security scanner for codebases — finds hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, and more. Covers OWASP Top 10, Mobile Top 10, and LLM Top 10."},"observed_at":"2026-11-06T10:48:51Z"}}