sembraniteam/claude-plugins

sembraniteam/claude-plugins

Command

Scan all dependency manifests in the current project against OSV.dev and NVD, and output a CVE table with severity and fix versions.

sembraniteam/claude-plugins

Command

Run a security audit scoped to only the files changed vs a base branch (plus uncommitted/staged changes) — the recommended default for PR review and for codebases too large for a full /audit to fit in context.

sembraniteam/claude-plugins

Command

Run a deep security audit on a single file, mapping every finding to its CWE ID and providing line-level evidence.

sembraniteam/claude-plugins

Command

Apply verified fixes to security findings from an existing audit report. Shows a fix plan per finding, waits for confirmation, applies minimal changes, then automatically runs independent verification. Use /audit-fix all to fix everything, or /audit-fix SA-001 to target a specific finding.

sembraniteam/claude-plugins

Command

Regenerate a full security audit report from the current session's findings and save it as SECURITY-AUDIT.md. Pass --sarif to also emit SECURITY-AUDIT.sarif.json for GitHub code scanning.

sembraniteam/claude-plugins

Command

Run the fix-reviewer agent independently against existing fixes — useful when you fixed vulnerabilities manually, made additional edits after /audit-fix, or want a second-opinion verification before committing. Works with any fix, not just ones from /audit-fix.

sembraniteam/claude-plugins

Command

Run a comprehensive security audit of the current codebase, covering OWASP Top 10, CWE mapping, and dependency CVE verification via NVD/OSV.