hijacksecurity

hijacksecurity/claude-plugins

Plugin Claude Code

Plugin marketplace listing 1 plugin: intercept.

hijacksecurity/claude-plugins

Plugin Claude Code

Intercept security for Claude Code — deep AI security scans that supplement your scanners and write findings back to the Intercept platform as your system of record. Targets what rules-based scanners can't reach: container image contents, cloud/infra posture, and cross-file/interprocedural logic.

hijacksecurity/claude-plugins

MCP server Claude CodeCodexCursor

MCP server "intercept", hosted remotely at intercept.hijacksecurity.com, as configured in hijacksecurity/claude-plugins.

hijacksecurity/claude-plugins

Command

Pull this repo's AI Advisors, verify each recommendation against your actual local code/tool state, and report a per-rec verdict (already-mitigated / valid / overstated-FP / partially-done) with local evidence. Read-only.

hijacksecurity/claude-plugins

Command

Fix a specific Intercept finding end-to-end — verify, apply the fix, prove it, mark it resolved.

hijacksecurity/claude-plugins

Command

Natural-language security hunt across the repo (auth bypass, tenant isolation, SSRF, insecure deserialization, business-logic), recorded in Intercept. Secrets are out of scope (the static scanner's lane).

hijacksecurity/claude-plugins

Command

Show this repo's Intercept security posture — score, grade, finding breakdown, and what's driving it.

hijacksecurity/claude-plugins

Command

Deep AI security scan of this repo — supplements your scanners by targeting image contents, cloud/infra posture, and cross-file logic, then records new findings in Intercept.

hijacksecurity/claude-plugins

Command

Pull open Intercept findings, verify each against the code, and clear false positives / confirm real ones.

hijacksecurity/claude-plugins

Skill Claude CodeCodex

Pull a repo's Intercept AI Advisors and verify each recommendation against the actual local code and tool state, emitting a per-rec verdict (already-mitigated / valid / overstated-FP / partially-done) with concrete local evidence. This is the plugin's local-verification superpower against advisor noise (e.g. catching…

hijacksecurity/claude-plugins

Skill Claude CodeCodex

Natural-language security hunt across the repo — decompose a user-described hunt (auth bypass, tenant isolation, SSRF, insecure deserialization, business-logic) into targeted code reading, then write findings back to Intercept. Use for /intercept:hunt or when the user asks to hunt for a specific class of…

hijacksecurity/claude-plugins

Skill Claude CodeCodex

Fix a specific Intercept finding end-to-end — verify it's real, propose and apply the code fix, run available tests, mark it resolved, and optionally trigger a rescan. Use for /intercept:fix or when the user asks to fix or remediate a specific finding.

hijacksecurity/claude-plugins

Skill Claude CodeCodex

Establish what's security-relevant about this repo before an Intercept scan or hunt — detect the stack from the code, ask the platform (getrepocontext) what it already knows, and confirm only the gaps it can't infer. Never writes anything into the repo. Use at the start of /intercept:scan and /intercept:hunt, or when…

hijacksecurity/claude-plugins

Skill Claude CodeCodex

Perform a deep, systematic AI security review of the whole application — security architecture and threat model, authentication and authorization, injection and input handling, cryptographic weaknesses, container images, live cloud and infra, CI/CD and supply chain, and business logic — by actively investigating what…

hijacksecurity/claude-plugins

Skill Claude CodeCodex

Verify open Intercept findings by reading the code and following the data/taint flow, classify each as true/false/unknown, and write the verdict back via updatefindingstatus. Works on both scanner and AI findings. Use for /intercept:triage or when the user asks to verify, triage, or clear false positives.

hijacksecurity/claude-plugins

Skill Claude CodeCodex

Foundation for working with the Intercept MCP server — auth model, the tool catalog and when to use each, pagination, error handling, the resolutionid-vs-id rule, the category enum mapping, and the security guardrails. Load this whenever any other Intercept skill activates, or whenever the user asks to scan, triage…