Plugin Claude Code
Security audit your project with Ship Safe — 29 agents, 80+ attack classes, real-time Claude Code hooks, deep LLM analysis, and CI mode.
Plugin Claude Code
Security audit your project with Ship Safe — 29 agents, 80+ attack classes, real-time Claude Code hooks, deep LLM analysis, and CI mode.
Skill Claude CodeCodex
Manage your security baseline — accept current findings as known debt, then only report new regressions on future scans. Use when the user wants to adopt security scanning incrementally or suppress existing findings.
Skill Claude CodeCodex
Run Ship Safe in CI mode — compact output, exit codes, SARIF generation. Use when the user wants to set up CI/CD security gates or test their pipeline configuration.
Skill Claude CodeCodex
Run a deep security audit with LLM-powered taint analysis — regex scan nominates findings, then an LLM verifies taint reachability and exploitability. Use when the user wants thorough, high-confidence results with fewer false positives.
Skill Claude CodeCodex
Auto-fix security issues — remediate hardcoded secrets and common vulnerabilities (TLS bypass, debug mode, XSS, shell injection, Docker :latest). Use when the user wants to automatically fix security findings.
Skill Claude CodeCodex
Install ship-safe as real-time Claude Code hooks — blocks secrets and dangerous commands before they land on disk. Use when the user wants automatic security scanning on every file write or bash command.
Skill Claude CodeCodex
Run a multi-agent red team scan — 29 specialized security agents scan for 80+ attack classes including injection, auth bypass, SSRF, supply chain, Supabase RLS, MCP security, agentic AI, RAG poisoning, PII compliance, and more. Use when the user wants a deep security analysis beyond just secrets.
Skill Claude CodeCodex
Quick scan for leaked secrets — API keys, passwords, tokens, database URLs. Use when the user wants to check for hardcoded secrets or exposed credentials.
Skill Claude CodeCodex
Get your project's security health score (0-100, A-F grade). Use when the user wants a quick security check or asks "is my code safe to ship?".
Skill Claude CodeCodex
Run a full security audit on this project — 16 agents scan for secrets, injections, auth bypass, SSRF, supply chain, Supabase RLS, MCP security, agentic AI, RAG poisoning, PII compliance, and more. Use when the user wants a security audit, vulnerability scan, or asks if their code is safe to ship.
Cursor rule Cursor
Use the repository's existing style and keep changes focused. Read relevant files before editing and run the local test suite after changes. Keep credentials in environment variables; never copy their values into source.