What it can do: agentic-security

Plugin bundle · Clear-Capabilities

What agentic-security declares, asks for and runs, according to the marketplaces we read. Installs into the AI tool as a plugin bundle; what it starts is listed below. None of the marketplaces we read publishes its tools or the settings it asks for. As of our marketplace pass on 2026-10-12.

This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.

Where it runs

Installs into the AI tool as a plugin bundle; what it starts is listed below.As declared on: Claude Code: claude-plugins-community.

What it declares

None of the marketplaces we read publishes a list of tools for it.

Prompts and resources: the marketplaces we read do not publish them.

What it asks for

None of the marketplaces we read lists environment variables for it.

Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.

What it runs besides MCP

Skills: 7 As declared on: Claude Code: claude-plugins-community.

agentic-security:add-scan-rule
agentic-security:privacy-data-flow
agentic-security:secure-coding-guard
agentic-security:security-explain
agentic-security:security-fix-finding
security-rotate-leak
security-scan-on-deploy

Commands: 10 As declared on: Claude Code: claude-plugins-community.

compliance
find-and-fix-everything
fix
labs
posture
scan
secure
setup
supply
triage

Agents: 10 As declared on: Claude Code: claude-plugins-community.

_CONFINEMENT
refactor-cleaner
sca-malware-analyst
sca-triager
security-chain-synthesizer
security-fixer
security-logic-reviewer
security-material-change
security-poc-generator
security-triager

Hooks: 5 As declared on: Claude Code: claude-plugins-community.

PostToolUse
PreToolUse
SessionStart
Stop
UserPromptSubmit

Who answers for it

Clear-Capabilities

No marketplace we read marks it or its publisher as verified.
License: PolyForm-Internal-Use-1.0.0.
The repository github.com/clear-capabilities/agentic-security belongs to the account the publisher is listed under on Claude Code: claude-plugins-community.

How it has changed

Its tools, settings, hooks and composition have not changed since we started watching it.

In context

Median number of secrets a plugin bundle asks for on the marketplaces we read: 0.0. This one asks for: 0.
Share of plugin bundles that run on a remote server: 17%.

Where it is published and how its figures have moved

Compare it side by side with similar plugins

Data comes from the public marketplace file https://github.com/anthropics/claude-plugins-community/blob/HEAD/.claude-plugin/marketplace.json. Figures come from our own regular passes over the marketplaces, last read on 2026-10-12. We publish no contact details for plugin publishers.