Remote OpenClaw
Menu

semgrep

claude-plugins-official

securityClaude Codeby anthropics

Summary

Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.

Install to Claude Code

/plugin install semgrep@claude-plugins-official

Run in Claude Code. Add the marketplace first with /plugin marketplace add anthropics/claude-plugins-official if you haven't already.

README.md

Semgrep Guardian: Claude Code Plugin

Installation instructions:

1. Start a Claude Code instance by running:

    claude

1. Add the Semgrep marketplace by running the following command in Claude:

    /plugin marketplace add semgrep/guardian

1. Install the plugin from the marketplace:

    /plugin install semgrep@semgrep-marketplace

1. Tell claude to load the plugin:

    /reload-plugins

1. Ask claude to login to semgrep, using the guardian mcp

    login to semgrep

This should call into the MCP, but if claude is having trouble, call /clear to restart claude, or exit and reopen claude manually.

Related plugins

Browse all →

42crunch-api-security-testing

claude-plugins-official

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

Open plugin →

auth0

claude-plugins-official

Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.

Open plugin →

crowdstrike-falcon-foundry

claude-plugins-official

CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.

Open plugin →

duende-skills

claude-plugins-official

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

Open plugin →

jfrog

claude-plugins-official

Use the JFrog Platform from Claude Code: Artifactory repos and artifacts, security findings and exposures, Catalog package safety and downloads, workflows across the SDLC, and platform administration.

Open plugin →

security-guidance

claude-plugins-official

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

Open plugin →

Browse

Plugins by category

Other2041development375productivity237communication49design47security46database40workflow30compliance28product24data22bundle21