A model-agnostic security framework that brings secure-by-default practices to AI-assisted software development. This project provides a curated ruleset of security workflows, reusable command templates, and automated validations designed to catch misconfigurations, enforce compliance, and harden code during generation and review.
Command Claude CodeCursor
Detect secrets and credentials in your codebase using gitleaks on a selected location. Scan for API keys, passwords, tokens, and other sensitive information that should not be committed to version control. This command will alert you about detected secrets but will not modify or remove any code.
Command Claude CodeCursor
Help create complete, production-ready, secure boilerplate template for requested pattern or framework. Secure by default, follows industry best practices.
Command Claude CodeCursor
Help generate security-focused unit tests for specified routes, functions, or components. Verify security assumptions and catch vulnerabilities.
Command Claude CodeCursor
Help perform comprehensive, lightweight threat modeling analysis of specified component, service, or application. Practical, developer-focused, actionable.
Command Claude CodeCursor
Help perform comprehensive security analysis of AI-powered application components. Identify AI-specific security threats and provide remediation guidance.
Command Claude CodeCursor
Fix CISA Known Exploited Vulnerabilities (KEV) if exists in your codebase. Search for vulnerabilities that are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog using Trivy filesystem scanning. If any of these vulnerabilities are found, fix them by the CVE notes.
Command Claude CodeCursor
Set up CI/CD checks to block the inclusion of critical vulnerabilities to your codebase. Create or update a CI workflow that runs Trivy filesystem scanning to detect critical vulnerabilities and fail the pipeline if any are introduced.
Command Claude CodeCursor
Transform your Docker images to FIPS compliant by removing root users and ensuring security best practices. Make all production docker images in this repository FIPS compliant by hardening Dockerfiles and ensuring they do not run as root users.
Command Claude CodeCursor
Review API authentication and authorization mechanisms. Find API endpoints on this service that have no authentication attached to them and add authentication where missing.
Command Claude CodeCursor
Run a security remediation task that checks for vulnerabilities in the codebase and applies necessary fixes. Scan the codebase for vulnerabilities using Trivy and attempt to fix up to 3 vulnerabilities of the highest impact.
Command Claude CodeCursor
Help validate the current code context against compliance requirements (SOC 2, ISO 27001, NIST, GDPR, HIPAA, PCI DSS). Identify gaps, validate controls, and provide remediation guidance.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: