Security Scanner

Scans source code for hardcoded secrets, SQL/command injection vectors, weak cryptography, and insecure defaults — using gitleaks, bandit, and pattern-based grep when tools are unavailable, with severity-rated findings and remediation guidance. Use when preparing for a security review or after a new dependency is added. Trigger with "security scan", "find hardcoded secrets".

Type
subagent
GitHub stars
2.5K
Repository
jeremylongshore/claude-code-plugins-plus-skills
Category

Install

  1. 1Manual install

    Copy the subagent file from the repository into ~/.claude/agents/<name>.md. The filename must match the subagent name (e.g. security-scanner.md).

  2. 2Verify

    /agents, /commands or /hooks in Claude Code

    Restart Claude Code and list your installed components to confirm it was picked up.

⚠️ Some repositories ship a CLI installer — check the repo README for the recommended method.

View on GitHub ↗

Prefer the full source? The repository README is the authoritative install reference.