πŸ”Œ

security-guidance

πŸ”ŒPlugin

bachsh/supermarket

VibeIndex|
What it does
|

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

πŸͺ

Part of

bachsh/supermarket

Installation

Add marketplace in Claude Code:
/plugin marketplace add bachsh/supermarket
Step 2. Install plugin:
/plugin install security-guidance@supermarket
0
-
AddedJun 18, 2026

More from this repository10

πŸ”Œ
seo-technical-optimizationπŸ”ŒPlugin

Technical SEO optimization including meta tags, keywords, structure, and featured snippets

πŸ”Œ
context-managementπŸ”ŒPlugin

Context persistence, restoration, and long-running conversation management

πŸ”Œ
web-scriptingπŸ”ŒPlugin

Web scripting with PHP and Ruby for web applications, CMS development, and backend services

πŸ”Œ
plugin-evalπŸ”ŒPlugin

Three-layer quality evaluation framework for Claude Code plugins with Elo ranking

πŸ”Œ
javascript-typescriptπŸ”ŒPlugin

JavaScript and TypeScript development with ES6+, Node.js, React, and modern web frameworks

πŸ”Œ
ralph-wiggumπŸ”ŒPlugin

Implementation of the Ralph Wiggum technique - continuous self-referential AI loops for interactive iterative development. Run Claude in a while-true loop with the same prompt until task completion.

πŸ”Œ
llm-application-devπŸ”ŒPlugin

LLM application development with LangGraph, RAG systems, vector search, and AI agent architectures for Claude 4.6 and GPT-5.4

πŸ”Œ
protect-mcpπŸ”ŒPlugin

Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin β€” decisions are policy-gated before they run and every decision produces a tamper-evident receipt verifiable offline.

πŸ”Œ
review-agent-governanceπŸ”ŒPlugin

Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI configuration. Joins protect-mcp and signed-audit-trails in the governance category; composes with protect-mcp for runtime enforcement.

πŸ”Œ
shell-scriptingπŸ”ŒPlugin

Production-grade Bash scripting with defensive programming, POSIX compliance, and comprehensive testing