Skip to content

Claude Code Security plugins and skills

Flowy lists 2 plugins in the Security category for Claude Code. auth, secrets, vulnerability scanning, OWASP, compliance, audits Every listing shows what is inside before you install, who built it, and whether it is Auto-invoked, meaning a FLOW.md router fires the right skill as you prompt instead of leaving them dormant.

trailofbits-skills
security

trailofbits-skills

A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility. Also see: claude-code-config · skills-curated · claude-code-devcontainer · dropkit

75 skills
@trailofbits@trailofbitsView Plugin
safety-net
security

safety-net

A coding agent CLI hook that acts as a safety net, catching destructive git and filesystem commands before they execute. Supports Codex, Claude Code, OpenCode, Gemini CLI, Copilot CLI, Kimi Code and Pi.

1 skills
@kenryu42@kenryu42View Plugin

FAQ

What are the best Claude Code Security plugins?
Flowy lists 2 plugins for Security, ranked by fit and signal rather than raw install count. Open any listing to read every skill in full before you install it.
Do these Security skills run automatically?
The Auto-invoked ones do. They ship a FLOW.md router and a hook, so Claude Code loads the matching skill as you prompt. Indexed listings install normally and you invoke them yourself.
How does Flowy decide a plugin is a Security plugin?
The tag is derived from the plugin's own content, its skill names, descriptions, README and file types, not from a tag someone typed. A plugin appears here only when its real content matches.
Are these Security plugins free?
Yes. Flowy is free and open source with nothing gated. You can read every skill before installing, and each listing links to its upstream repository and its creator.

Browse every plugin