skillhash

Is claude-security safe?

Grade A, 100/100. No meaningful risk found.

Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the user asks to scan, audit or check code with Claude Security, to scan their changes with Claude Security, or to fix or patch Claude Security findings.

A

claude-security

plugins/claude-security/skills/claude-security
100/100 · No meaningful risk foundNo security findings

Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the user asks to scan, audit or check code with Claude Security, to scan their changes with Claude Security, or to fix or patch Claude Security findings.

Content hash
sha256:187b2862d7a64e7efe2e7da701212100e7c0dce8225722f35a46406ef9aa0321
Files
7
Quality
95/100

Security findings

None of the 30 rules matched.

Quality

  • lowBroken local linkSL706 · plugins/claude-security/skills/claude-security/SKILL.md:42
    ${CLAUDE_SKILL_DIR}/jobs/scan-codebase.md

    Linked file '${CLAUDE_SKILL_DIR}/jobs/scan-codebase.md' is not in the skill. Fix: Add the file or fix the link.

  • lowBroken local linkSL706 · plugins/claude-security/skills/claude-security/SKILL.md:43
    ${CLAUDE_SKILL_DIR}/jobs/scan-changes.md

    Linked file '${CLAUDE_SKILL_DIR}/jobs/scan-changes.md' is not in the skill. Fix: Add the file or fix the link.

  • lowBroken local linkSL706 · plugins/claude-security/skills/claude-security/SKILL.md:44
    ${CLAUDE_SKILL_DIR}/jobs/suggest-patches.md

    Linked file '${CLAUDE_SKILL_DIR}/jobs/suggest-patches.md' is not in the skill. Fix: Add the file or fix the link.

  • lowBroken local linkSL706 · plugins/claude-security/skills/claude-security/SKILL.md:51
    ${CLAUDE_PLUGIN_ROOT}/scripts

    Linked file '${CLAUDE_PLUGIN_ROOT}/scripts' is not in the skill. Fix: Add the file or fix the link.

  • lowBroken local linkSL706 · plugins/claude-security/skills/claude-security/SKILL.md:52
    ${CLAUDE_SKILL_DIR}/specs/report-spec.md

    Linked file '${CLAUDE_SKILL_DIR}/specs/report-spec.md' is not in the skill. Fix: Add the file or fix the link.

  • lowBroken local linkSL706 · plugins/claude-security/skills/claude-security/SKILL.md:53
    ${CLAUDE_SKILL_DIR}/specs/patch-spec.md

    Linked file '${CLAUDE_SKILL_DIR}/specs/patch-spec.md' is not in the skill. Fix: Add the file or fix the link.

Files in this skill
  • SKILL.md5.4 KB
  • role.md10.4 KB
  • jobs/scan-changes.md32.1 KB
  • jobs/scan-codebase.md28.0 KB
  • jobs/suggest-patches.md31.7 KB
  • specs/patch-spec.md11.2 KB
  • specs/report-spec.md14.5 KB

Questions about claude-security

Is claude-security safe to install?
Our scanner gave claude-security grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install claude-security in Claude Code or Codex?
Run skillhash add github:anthropics/claude-plugins-official/plugins/claude-security/skills/claude-security. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if claude-security changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from anthropics/claude-plugins-official