claude-security
The Claude Security menu — pick a job: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose).
Profile →npx skills add anthropics/claude-plugins-official --skill claude-security --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Claude Security - Session start time (UTC, the stamp report directories are named with): !`date -u +%Y%m%d-%H%M%S` ## The front-desk menu This is the front desk. Its whole purpose is to work out which job the user wants and drive it, following that job's recipe. 1. **If the user already asked for a specific job** — in the arguments (`$ARGUMENTS`) or in plain text ("scan this repo", "scan my branch", "fix the findings", a bare commit sha) — do that job directly and skip the menu. The recipe still asks its own single follow-up question wherever the request left one open. 2. **Otherwise, open with the menu.** Call AskUserQuestion once, single select, `header: "Job"`, `question: "What would you like to do?"`, offering exactly these three options (never invent others — the tool adds its own free-text entry). The menu is your first user-visible act; no text of any kind comes before it. Offer these three options: 1. [Scan codebase](${CLAUDE_SKILL_DIR}/jobs/scan-codebase.md) 2. [Scan changes](${CLAUDE_SKILL_DIR}/jobs/scan-changes.md) 3. [Suggest patches](${CLAUDE_SKILL_DIR}/jobs/suggest-patches.md) "Scan codebase" is the recommended pick — it carries " (Recommended)" and goes first; the
- The front-desk menu
- Environment and Paths (substituted at invocation, use verbatim)
- What to say about safety, if asked
- Existing Findings
What does the claude-security skill do?
The Claude Security menu — pick a job: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose).
How do I install it?
Run `npx skills add anthropics/claude-plugins-official --skill claude-security --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From anthropics/claude-plugins-official, a repository with 33,027 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.