security-guidance
๐Pluginanthropics/claude-code
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Overview
An Anthropic official plugin that provides security reminders when editing files. Warns about potential security issues including command injection, XSS, and unsafe code patterns via a hook system.
Key Features
- Automatic security warnings when editing code files
- Detection of common vulnerability patterns (XSS, SQL injection, command injection)
- Hook-based integration that runs before file modifications
- OWASP-aligned security guidance
Who is this for?
Developers who want an extra layer of security awareness when Claude edits code. The hook automatically flags potential security issues before they're written to files.
Part of
anthropics-claude-code
๐ Related Resources
Installation
/plugin marketplace add anthropics/claude-code/plugin install security-guidance@claude-code-pluginsMore from this repository10
Interactive self-referential AI loops for iterative development. Claude works on the same task repeatedly, seeing its previous work, until completion.
Interactive learning mode that requests meaningful code contributions at decision points (mimics the unshipped Learning output style)
Development kit for working with the Claude Agent SDK
Easily create custom hooks to prevent unwanted behaviors by analyzing conversation patterns or from explicit instructions. Define rules via simple markdown files.
Comprehensive toolkit for developing Claude Code plugins. Includes 7 expert skills covering hooks, MCP integration, commands, agents, and best practices. AI-assisted plugin creation and validation.
Automated code review for pull requests using multiple specialized agents with confidence-based scoring to filter false positives
Adds educational insights about implementation choices and codebase patterns (mimics the deprecated Explanatory output style)
Create distinctive, production-grade frontend interfaces with high design quality. Generates creative, polished code that avoids generic AI aesthetics.
Comprehensive feature development workflow with specialized agents for codebase exploration, architecture design, and quality review
Migrate your code and prompts from Sonnet 4.x and Opus 4.1 to Opus 4.5.