By sontixyou
Security scanner for Claude Code plugins - analyzes hooks, MCP servers, scripts, and prompts for potential risks
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
A marketplace that tracks and uncovers security issues in Claude Code plugins — like a detective.
claude plugin marketplace add <path-to-this-repo>
sleuth/
├── .claude-plugin/
│ └── marketplace.json
├── plugins/
│ └── plugin-security-checker/
└── README.md
| Plugin | Description |
|---|---|
| plugin-security-checker | Security audit tool for Claude Code plugins |
Add your plugin to the plugins/ directory and register it in the plugins array of marketplace.json.
npx claudepluginhub sontixyou/sleuth --plugin plugin-security-checkerUpgrade multiple Claude Code plugins interactively with version checking and auto-update notifications
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Perform security audit on codebase
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers
Perform security audit on codebase
Enterprise grade AI-native application security scanning, validation, and remediation
Specialized security review subagent