skill-security-check
Plugin bundle · aliksir
skill-security-check is a plugin bundle for AI coding tools published by aliksir. Marketplaces we read that list it: 1 (Claude Code: claude-plugins-community). We first saw it on 2026-10-12 and have recorded no change since. As of our marketplace pass on 2026-10-12.
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prompt injection, data exfiltration, supply chain attacks (ToxicSkills/ClawHavoc), credential theft, reverse shells, backdoor persistence, API endpoint hijacking, Unicode homoglyph attacks, and context window poisoning. Includes runtime hooks for Bash command validation and MCP response inspection.
- Marketplaces
- 1
- Where it runs
- Installs as a plugin bundle
- Largest published figure
- 4 Stars (GitHub) · Claude Code: claude-plugins-community
- First seen
- 2026-10-12
- Last change
- None recorded
- Verified mark
- Not marked
Where it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Claude Code: claude-plugins-community (Open the source on GitHub) | Listed | 2.5.0 | Forks (GitHub): 2 Stars (GitHub): 4 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
What it can do
Installs into the AI tool as a plugin bundle; what it starts is listed below.
- Tools it declares
- Not published
- Environment variables it asks for
- Not published
- Hooks it runs
- 3
What the bundle contains
As published on Claude Code: claude-plugins-community.
Skills: 1
skill-security-check
Commands: 1
skill-security-check
Hooks: 2
PostToolUsePreToolUse
What changed
Nothing has moved on this plugin since we started watching it.
The publisher
aliksir · Repository: github.com/aliksir/claude-code-skill-security-check
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
- Agent Skill & Config Security Audit
- io.github.sudo-ai-git/mcp-skill-sec
- XploitScan
- SkillsSafe Security Scanner
- claude-security
- AIShield Security Scanner
- ExposureGuard
- Frogeye Security Scanner
- Agent Security Scanner
- Scout Security
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
Has a listing on Claude Code: claude-plugins-official (5)
Has a listing on Claude: knowledge-work-plugins (5)
Has a listing on Codex: openai-curated (openai/plugins) (5)
Has a listing on Community GitHub marketplaces (5)
Has a listing on Copilot CLI: github/awesome-copilot (5)
Has a listing on Copilot CLI: github/copilot-plugins (5)
Has a listing on Cursor: cursor/plugins (5)
Has a listing on Docker MCP Catalog (5)
Has a listing on Official MCP Registry (5)
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Is this your plugin?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record. You get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and can put its remote endpoint on monitoring as a web service.
Data comes from the public marketplace file https://github.com/anthropics/claude-plugins-community/blob/HEAD/.claude-plugin/marketplace.json. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.