By simplefy-ai
Security review and hardening for Claude Code. Two skills: local-setup discovers your environment, local-review validates it with automated checks covering MCP servers, credentials, permissions, and data flows.
Run an automated security review of your local Claude Code setup. Checks disk encryption, MCP server health, dependency vulnerabilities, credential security, permissions audit, version pinning, stale credentials, and data flow risks.
Discover and document your Claude Code security posture. Scans MCP servers, inventories credentials, maps data flows, and generates a security-assessment.md file. Run once, then use /local-security:local-review for ongoing validation.
A Claude Code plugin that audits the security of your local Claude Code environment.
If you use Claude Code with MCP servers, OAuth tokens, API keys, or third-party plugins, this plugin helps you understand what's exposed and whether it's properly protected.
Run these commands inside Claude Code:
/plugin marketplace add simplefy-ai/local-security
/plugin install local-security@simplefy-ai
Then restart Claude Code.
Two skills with different jobs:
| Skill | What it does | When to run |
|---|---|---|
/local-security:local-setup | Scans your environment and creates a security assessment document | Once, or when your setup changes significantly |
/local-security:local-review | Runs automated checks and flags issues | Monthly, or after adding servers/credentials/permissions |
Setup discovers what you have — MCP servers, credential files, privacy settings, data flows — and writes everything to ~/.claude/security-assessment.md. It documents but does not judge. Previous assessments are archived with timestamps.
Review validates what setup found. It checks:
npm audit / pip auditEach check reports PASS, WARN, or FAIL. Review also populates a mitigation roadmap in the assessment file with prioritised actions for any issues found.
Three things that actually matter for a local Claude Code setup:
MIT — see LICENSE.
Built by simplefy.ai
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub simplefy-ai/local-security --plugin local-securityPerform security audit on codebase
Runtime security enforcement for AI coding agents — policy hooks, audit receipts, threat hunting, and security tools for Claude Code.
Commands for security auditing and vulnerability scanning
Protect secrets and credentials from Claude Code. Blocks writes to .env files, detects API keys in shell commands, prevents hardcoded tokens, and guards service account JSON files.
Runtime security plugin for Claude Code with balanced default hooks plus the Stallion inline MCP gateway for shell, git, MCP, secret, and exfiltration risks.
Perform security audit on codebase