Claude Security — Agent Skill by Anthropic

From the author

Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the user asks to scan, audit or check code with Claude Security, to scan their changes with Claude Security, or to fix or patch Claude Security findings.

— the description by Anthropic

Install

Get the skill from its source (we cannot redistribute it):
https://github.com/anthropics/claude-plugins-official/tree/0412be76f50ab4f4f8abff3753efa9269fbbca5b/plugins/claude-security/skills/claude-security

Documentation by Anthropic

The licence of this skill does not allow us to copy its documentation. Read it at the source

Files

SKILL.md(opens on GitHub)Not mirrored: opens on GitHub5.4 KiB
jobs/scan-changes.md(opens on GitHub)Not mirrored: opens on GitHub32.1 KiB
jobs/scan-codebase.md(opens on GitHub)Not mirrored: opens on GitHub28.0 KiB
jobs/suggest-patches.md(opens on GitHub)Not mirrored: opens on GitHub31.7 KiB
role.md(opens on GitHub)Not mirrored: opens on GitHub10.4 KiB
specs/patch-spec.md(opens on GitHub)Not mirrored: opens on GitHub11.2 KiB
specs/report-spec.md(opens on GitHub)Not mirrored: opens on GitHub14.5 KiB

Requirements and compatibility

Written for: Claude Code, Claude apps

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Declares allowed tools, Names Claude Code tools, Needs an MCP server

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Security And Hardening
Addy Osmani· Community
A comprehensive framework for building secure, hardened web applications through threat modeling and defensive coding practices.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository113.9k
Mtls Configuration
Seth Hobson· Community
A comprehensive guide and template library for implementing mutual TLS (mTLS) to secure service-to-service communication in zero-trust environments.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
Secrets Management
Seth Hobson· Community
A guide to implementing secure secrets management in CI/CD pipelines using industry-standard tools and best practices.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
K8s Security Policies
Seth Hobson· Community
A comprehensive guide for implementing production-grade security policies in Kubernetes clusters.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
Jfrog Sec
GitHubOfficial
A specialized DevSecOps agent for automated security remediation using JFrog intelligence.
SecurityGitHub Copilot
MITGitHub stars of the source repository40.9k
Gws Modelarmor Create Template
Google WorkspaceOfficial
Create and configure new Google Model Armor templates for content safety.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
Apache-2.0GitHub stars of the source repository32.2k