/harden
Run a build-and-harden pass across code, pipeline, cloud, and infra, then track remediation.
$ npx -y skills add jassics/awesome-claude-security --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/harden
Context preview
What this command does when you run it.
Run a build-and-harden pass across code, pipeline, cloud, and infra, then track remediation.
Command definition
harden.mddescription: Run a build-and-harden pass across code, pipeline, cloud, and infra, then track remediation. argument-hint: [repo / service / pipeline to harden]
Harden: **$ARGUMENTS**
Walk the hardening pass, using installed skills (note any whose plugin is missing):
1. **Secure the pipeline** — `/security-engineer:secure-pipeline` to assess and harden CI/CD as the control point. 2. **Code & deps** — `/sast-sca:sast-review` and `/sast-sca:sca-review`; for supply-chain trust add `/supply-chain-security:dependency-supply-chain-review` and `/supply-chain-security:pipeline-integrity-review`. 3. **Cloud & infra** — `/cloud-security:cloud-posture-review`, `/k8s-security:k8s-cluster-review`, `/infrastructure-security:iac-security-review` and `/infrastructure-security:secrets-management-review` as applicable. 4. **Prioritize & track** — `/vulnerability-management:vulnerability-prioritization` then `/vulnerability-management:remediation-tracking` to assign owners/SLAs. 5. **Report** — `/security-reporting:finding` per issue; optionally `/security-integrations:publish-finding-to-jira` to turn them into tracked work.
For deep execution, hand off to the `security-engineer` agent. Prefer durable fixes (golden images, IaC modules, pipeline gates) over one-off patches so issues don't recur.
A Claude Code plugin marketplace for the full cybersecurity & GenAI-security lifecycle — from recon and threat modeling to detection engineering, GRC, and CISO-level strategy. A pentester knows which OWASP test bends a broken-access-control endpoint.
Repo: jassics/awesome-claude-security
Other commands on awesome-claude-security.
- /safety-review
Run an AI safety review for a feature/model — harms, evaluations, guardrails, and a documented safety case.
Open command - /defend
Run a threat-informed defense cycle for a technique or threat — coverage check, hunt, detection, and purple-team validation.
Open command - /board-brief
Build a board/executive security brief — strategy, quantified risk, and a board-ready deck.
Open command - /tech-review
Assess technology/security risk for a strategic decision and frame the secure-by-design path.
Open command - /precommit
Run the pre-commit security gate on the current changeset and report a single pass/fail verdict.
Open command - /assessment
Run a compliance gap-assessment for a framework, tie gaps to risk, and produce findings + remediation.
Open command