ghostsecurity-skills
Plugin marketplace repository for Ghost Security's AI-native application security skills for Claude Code.
Plugin Signal74/100Solid
maintained91
capable46
documented100
adopted56
Install on Claude Code
Auto-invoked ships a router so the right skill fires automatically as you prompt. No remembering which skill to call.
Normal is the plain upstream plugin, installed as-is. You invoke its skills yourself.
The plugin> /plugin marketplace add ghostsecurity/skills> /plugin install ghost@ghost-securityAuto-invocation> /plugin marketplace add flowy-sh/flowy-core> /plugin install flowy-core> /plugin install flowy-ghost
What's inside
Skill(8 skills)
/exoThe single interface for building, improving, and debugging exo workflows. Routes to one of three intents. BUILD takes a rough idea through interrogation, assessment, resource creation in dependency order, and one manual run, then hands off. IMPROVE runs the observe-and-iterate/proxyStarts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include starting/stopping the proxy scoped to specific domains, viewing captured request/response logs, searching traffic by/repo-contextScans directory structure, detects projects, maps dependencies, and documents code organization into a repo.md file. Use when the user needs a codebase overview, project structure map, or repository context before security analysis.
README
Ghost Security Skills/Plugin Marketplace
Plugin marketplace repository for Ghost Security's AI-native application security skills for Claude Code.
Quick Installation
With Claude Code:
claude plugin marketplace add ghostsecurity/skills
claude plugin install ghost@ghost-security
claude
Alternatively, install the skills plugin within Claude Code:
/plugin marketplace add ghostsecurity/skills
/plugin install ghost@ghost-security
Currently, you will need to restart Claude Code for the plugin to load.
Comprehensive Documentation
Full documentation, tutorials, and video guides at ghostsecurity.ai.
Skills in this Repository Marketplace
| Skill | Description |
|---|---|
ghost-repo-context | Build shared repository context (business criticality, sensitive data, component map) |
ghost-scan-deps | Exploitability analysis of dependency vulnerabilities (SCA) |
ghost-scan-secrets | Context assessment of detected secrets and credentials |
ghost-scan-code | AI-powered detection of code security issues (SAST) |
ghost-report | Combined security report across all scan results |
ghost-validate | Dynamic validation of findings against a live application (DAST) |
ghost-proxy | HTTP proxy for the ghost-validate skill |
ghost-exo | Build, improve, and debug workflows on the exo agent orchestration platform |
ghost-repo-context
ghost-scan-code
ghost-scan-deps
ghost-scan-secrets
ghost-validate
ghost-report
Contributions, Feedback, Feature Requests, and Issues
Open an Issue per the Contributing guidelines and Code of Conduct
License
This repository is licensed under the Apache License 2.0. See LICENSE for details.
File tree
FAQ
ghostsecurity-skills is a Claude Code plugin of 8 hand-picked skills with a FLOW.md router. Install it once and the right skill fires as you prompt, with no slash command to remember. It is built for security work. It includes exo, proxy, repo-context. Free and open source.
- What is ghostsecurity-skills?
- Plugin marketplace repository for Ghost Security's AI-native application security skills for Claude Code.
- How do I install ghostsecurity-skills?
- Run these in Claude Code: /plugin marketplace add ghostsecurity/skills then /plugin install ghost@ghost-security. Then prompt normally.
- Does ghostsecurity-skills auto-invoke its skills?
- Yes. It ships a FLOW.md router that Flowy's hook fires, so the matching skill runs as you prompt. You never name a skill.
- Is ghostsecurity-skills free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it