defend
CommandRun a threat-informed defense cycle for a technique or threat — coverage check, hunt, detection, and purple-team validation.
@jassicsInstall CommandSecurity
Command
/safety-review
Run an AI safety review for a feature/model — harms, evaluations, guardrails, and a documented safety case.
> /plugin marketplace add jassics/awesome-claude-security
Command definition
safety-review.mddescription: Run an AI safety review for a feature/model — harms, evaluations, guardrails, and a documented safety case. argument-hint: [AI feature / model / release to review]
Run an AI safety review for: **$ARGUMENTS**
Walk it, using installed skills (note any whose plugin is missing). This is **safety** (harm, bias, misuse), distinct from security:
1. **Harm modeling** — `/ai-safety:harm-modeling` to enumerate plausible harms, affected groups, and misuse paths. 2. **Evaluate** — `/ai-safety:safety-evaluation` and `/ai-safety:safety-red-team` to test for the modeled harms; `/ai-safety:bias-fairness-assessment` for disparate impact. 3. **Guardrails** — `/ai-safety:guardrail-review` to check the mitigations actually cover the evaluated risks. 4. **Safety case** — `/ai-safety-engineer:safety-case` to assemble the structured, evidence-backed argument that the system is acceptably safe to ship. 5. **Report** — `/security-reporting:executive-summary` for the go/no-go; `/security-diagramming:mindmap` for the harm/mitigation map.
For deep execution, hand off to the `ai-safety-engineer` agent. The safety case is the deliverable — claims must be backed by evaluation evidence, not assertions.
Ships withawesome-claude-security
A Claude Code plugin marketplace for the full cybersecurity & GenAI-security lifecycle — from recon and threat modeling to detection engineering, GRC, and CISO-level strategy. A pentester knows which OWASP test bends a broken-access-control endpoint.
11111 skills17 agents1 MCP
Stars on GitHub
Momentum
- stars in total
- 11
Other commands on awesome-claude-security.
@jassicsInstall Commandboard-brief
CommandBuild a board/executive security brief — strategy, quantified risk, and a board-ready deck.
@jassicsInstall Commandtech-review
CommandAssess technology/security risk for a strategic decision and frame the secure-by-design path.
@jassicsInstall Commandprecommit
CommandRun the pre-commit security gate on the current changeset and report a single pass/fail verdict.
@jassicsInstall Commandassessment
CommandRun a compliance gap-assessment for a framework, tie gaps to risk, and produce findings + remediation.
@jassicsInstall Commandengagement
CommandRun an authorized penetration test end-to-end, chaining recon, testing, and reporting skills into one flow.
@jassicsInstall CommandMore commands from other plugins.
audit
CommandAudit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
@trailofbitsInstall Commandagt-check
CommandCheck text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
@microsoftInstall Commandarsenal
CommandShow which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…
@awarexoneInstall Command