By averlon-ai
Docker and container security analysis with vulnerability detection and remediation
A collection of Averlon security plugins for Claude Code.
You need an MCPClient-scoped API key pair from Averlon.
Key ID and Key SecretRequires Averlon admin access. Ask an Averlon org admin to create the key pair if you don't have admin access.
Add these to your shell profile (~/.zshrc, ~/.bashrc, etc.):
export AVERLON_MCPCLIENT_API_KEY="<your Key ID>"
export AVERLON_MCPCLIENT_SECRET_KEY="<your Key Secret>"
Reload your shell or run source ~/.zshrc to apply.
From within Claude Code, run:
/plugin marketplace add https://github.com/averlon-ai/averlon-claude-marketplace.git
/plugin install <plugin-name>@averlon-claude-marketplace
For example, to install the container remediation plugin:
/plugin install container-remediation@averlon-claude-marketplace
This opens the plugin UI where you can choose the installation scope — user (available across all projects), project, or team.
After installing a plugin, restart Claude Code for the new plugins/skills to be initialized:
/exit
Then reopen Claude Code.
| Plugin | Description | Docs |
|---|---|---|
container-remediation | Docker and container security analysis with vulnerability detection and remediation | View docs |
Requires secrets
Needs API keys or credentials to function
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub averlon-ai/averlon-claude-marketplace --plugin container-remediationScan containers for vulnerabilities using Trivy, Snyk, and other security tools
Docker and containerization expert for Dockerfile optimization, multi-stage builds, docker-compose orchestration, container debugging, image size reduction, security scanning, networking, and volume management. Use when working with Docker containers, writing Dockerfiles, or troubleshooting containerization issues.
Comprehensive security plugin: OWASP Top 10, authentication patterns, cryptography, API security, secrets management, supply chain security, DevSecOps, container security, zero trust, and threat modeling.
Audit and harden your software supply chain - packages, containers, GitHub Actions, IaC, AI/ML models, and IDE extensions. Action commands fix issues directly; walkthrough commands guide you through advanced setup.
Runtime security enforcement for AI coding agents — policy hooks, audit receipts, threat hunting, and security tools for Claude Code.
Sysdig's cloud security expertise, packaged as agent skills that work natively in your AI environment.