A Claude Code plugin that reviews web applications for security flaws — architecture recon, 33 vulnerability-class detectors, and a severity-ranked report.
Agent
Locates candidate sites for one vulnerability class across a codebase and records them for later verification. Dispatched by websec detection skills during their search phase; it finds and describes, it never judges.
Agent
Traces a small set of candidate sites end to end and classifies each against a vulnerability class with evidence. Dispatched by websec detection skills during their verification phase; it decides, and it must show why.