How do I install project-codeguard-codeguard-security?

Run these in Claude Code: /plugin marketplace add project-codeguard/rules then /plugin install codeguard-security@project-codeguard. Then prompt normally.

Does project-codeguard-codeguard-security auto-invoke its skills?

Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

Is project-codeguard-codeguard-security free?

Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.

Security

Plugin

project-codeguard-codeguard-security

Project CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, translators for popular coding agents, and validators to test rule compliance.

FLOW.md

project-codeguard@project-codeguard

GitHub

Plugin Signal23/100Fair

maintained23

capable14

documented14

adopted56

Install on Claude Code

> /plugin marketplace add project-codeguard/rules
> /plugin install codeguard-security@project-codeguard

Stats

Python GitHub

420

Stars

Forks

Quiet

Maintenance

Python

Language

6mo ago

Last commit

10mo ago

Created

Repo: project-codeguard/rules

In this plugin

1 skill

- software-security

See everything inside

What's inside

Skills

/software-securityA software security skill that integrates with Project CodeGuard to help AI coding agents write secure code and prevent common vulnerabilities. Use this skill when writing, reviewing, or modifying code to ensure secure-by-default practices are followed.

README

Read on GitHub

Project CodeGuard has been donated to the Coalition for Secure AI (CoSAI)!

This project is now maintained by the Coalition for Secure AI (CoSAI).

➡️ New Repository: github.com/cosai-oasis/project-codeguard

Please visit the new repository for the latest updates and how to contribute to the project.

File tree

166

project-codeguard/rulesView on GitHub

.claude-plugin/
  marketplace.json
  plugin.json
.github/
  ISSUE_TEMPLATE/
    new-rule.yml
    rule-feedback.yml
  workflows/
    build-ide-bundles.yml
    deploy-docs.yml
    stale.yml
    validate-rules.yml
.gitignore
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE
pyproject.toml
README.md
SECURITY.md
skills/
  software-security/
    rules/
      codeguard-0-additional-cryptography.md
      codeguard-0-api-web-services.md
      codeguard-0-authentication-mfa.md
      codeguard-0-authorization-access-control.md
      codeguard-0-client-side-web-security.md
      codeguard-0-cloud-orchestration-kubernetes.md
      codeguard-0-data-storage.md
      codeguard-0-devops-ci-cd-containers.md
      codeguard-0-file-handling-and-uploads.md
      codeguard-0-framework-and-languages.md
      codeguard-0-iac-security.md
      codeguard-0-input-validation-injection.md
      codeguard-0-logging.md
      codeguard-0-mcp-security.md
      codeguard-0-mobile-apps.md
      codeguard-0-privacy-data-protection.md
      codeguard-0-safe-c-functions.md
      codeguard-0-session-management-and-cookies.md
      codeguard-0-supply-chain-security.md
      codeguard-0-xml-and-serialization.md
      codeguard-1-crypto-algorithms.md
      codeguard-1-digital-certificates.md
      codeguard-1-hardcoded-credentials.md
    SKILL.md
sources/
  core/
    codeguard-0-additional-cryptography.md
    codeguard-0-api-web-services.md
    codeguard-0-authentication-mfa.md
    codeguard-0-authorization-access-control.md
    codeguard-0-client-side-web-security.md
    codeguard-0-cloud-orchestration-kubernetes.md
    codeguard-0-data-storage.md
    codeguard-0-devops-ci-cd-containers.md
    codeguard-0-file-handling-and-uploads.md
    codeguard-0-framework-and-languages.md
    codeguard-0-iac-security.md
    codeguard-0-input-validation-injection.md
    codeguard-0-logging.md
    codeguard-0-mcp-security.md
    codeguard-0-mobile-apps.md
    codeguard-0-privacy-data-protection.md
    codeguard-0-safe-c-functions.md
    codeguard-0-session-management-and-cookies.md
    codeguard-0-supply-chain-security.md
    codeguard-0-xml-and-serialization.md
    codeguard-1-crypto-algorithms.md
    codeguard-1-digital-certificates.md
    codeguard-1-hardcoded-credentials.md
    codeguard-SKILLS.md.template
  owasp/
    codeguard-0-ajax-security.md
    codeguard-0-attack-surface-analysis.md
    codeguard-0-authentication.md
    codeguard-0-authorization-testing-automation.md
    codeguard-0-authorization.md
    codeguard-0-bean-validation.md
    codeguard-0-browser-extension-vulnerabilities.md
    codeguard-0-c-based-toolchain-hardening.md
    codeguard-0-choosing-and-using-security-questions.md
    codeguard-0-ci-cd-security.md
    codeguard-0-clickjacking-defense.md
    codeguard-0-content-security-policy.md
    codeguard-0-cookie-theft-mitigation.md
    codeguard-0-credential-stuffing-prevention.md
    codeguard-0-cross-site-request-forgery-prevention.md
    codeguard-0-cross-site-scripting-prevention.md
    codeguard-0-cryptographic-storage.md
    codeguard-0-cw-cryptographic-security-guidelines.md
    codeguard-0-cw-memory-string-usage-guidelines.md
    codeguard-0-database-security.md
    codeguard-0-deserialization.md
    codeguard-0-django-rest-framework.md
    codeguard-0-django-security.md
    codeguard-0-docker-security.md
    codeguard-0-dom-based-xss-prevention.md
    codeguard-0-dom-clobbering-prevention.md
    codeguard-0-dotnet-security.md
    codeguard-0-error-handling.md
    codeguard-0-file-upload.md
    codeguard-0-forgot-password.md
    codeguard-0-graphql.md
    codeguard-0-html5-security.md
    codeguard-0-http-headers.md
    codeguard-0-http-strict-transport-security.md
    codeguard-0-injection-prevention.md
    codeguard-0-input-validation.md
    codeguard-0-insecure-direct-object-reference-prevention.md
    codeguard-0-jaas.md
    codeguard-0-java-security.md
    codeguard-0-json-web-token-for-java.md
    codeguard-0-key-management.md
    codeguard-0-kubernetes-security.md
    codeguard-0-laravel.md
    codeguard-0-ldap-injection-prevention.md
    codeguard-0-legacy-application-management.md
    codeguard-0-logging-vocabulary.md
    codeguard-0-mass-assignment.md
    codeguard-0-microservices-security.md
    codeguard-0-mobile-application-security.md
    codeguard-0-multifactor-authentication.md
    codeguard-0-network-segmentation.md
    codeguard-0-nodejs-docker.md
    codeguard-0-nodejs-security.md
    codeguard-0-npm-security.md
    codeguard-0-oauth2.md
    codeguard-0-open-redirect.md
    codeguard-0-os-command-injection-defense.md
    codeguard-0-password-storage.md
    codeguard-0-php-configuration.md
    codeguard-0-pinning.md
    codeguard-0-prototype-pollution-prevention.md
    codeguard-0-query-parameterization.md
    codeguard-0-rest-assessment.md
    codeguard-0-rest-security.md
    codeguard-0-ruby-on-rails.md
    codeguard-0-safe-c-functions.md
    codeguard-0-saml-security.md
    codeguard-0-securing-cascading-style-sheets.md
    codeguard-0-server-side-request-forgery-prevention.md
    codeguard-0-session-management.md
    codeguard-0-sql-injection-prevention.md
    codeguard-0-symfony.md
    codeguard-0-third-party-javascript-management.md
    codeguard-0-threat-modeling.md
    codeguard-0-transaction-authorization.md
    codeguard-0-transport-layer-security.md
    codeguard-0-unvalidated-redirects-and-forwards.md
    codeguard-0-user-privacy-protection.md
    codeguard-0-virtual-patching.md
    codeguard-0-vulnerable-dependency-management.md
    codeguard-0-web-service-security.md
    codeguard-0-xml-external-entity-prevention.md
    codeguard-0-xml-security.md
    codeguard-0-xs-leaks.md
    codeguard-0-xss-filter-evasion.md
    codeguard-0-zero-trust-architecture.md
  templates/
    custom-rule-template.md.example
src/
  convert_to_ide_formats.py
  converter.py
  formats/
    __init__.py
    agentskills.py
    antigravity.py
    base.py
    copilot.py
    cursor.py
    windsurf.py
  language_mappings.py
  LICENSE.md
  tag_mappings.py
  utils.py
  validate_unified_rules.py
  validate_versions.py
uv.lock

FAQ

project-codeguard-codeguard-security is a Claude Code plugin with 1 hand-picked skill for security work, indexed on Flowy. Install it with the command on its page. It includes software-security. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

What is project-codeguard-codeguard-security?: Project CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, translators for popular coding agents, and validators to test rule compliance.
How do I install project-codeguard-codeguard-security?: Run these in Claude Code: /plugin marketplace add project-codeguard/rules then /plugin install codeguard-security@project-codeguard. Then prompt normally.
Does project-codeguard-codeguard-security auto-invoke its skills?: Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.
Is project-codeguard-codeguard-security free?: Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.

project-codeguard-codeguard-security

project-codeguard@project-codeguard

GitHub

Plugin Signal23/100Fair

maintained23

capable14

documented14

adopted56

.claude-plugin/ marketplace.json plugin.json .github/ ISSUE_TEMPLATE/ new-rule.yml rule-feedback.yml workflows/ build-ide-bundles.yml deploy-docs.yml stale.yml validate-rules.yml .gitignore CODE_OF_CONDUCT.md CONTRIBUTING.md LICENSE pyproject.toml README.md SECURITY.md skills/ software-security/ rules/ codeguard-0-additional-cryptography.md codeguard-0-api-web-services.md codeguard-0-authentication-mfa.md codeguard-0-authorization-access-control.md codeguard-0-client-side-web-security.md codeguard-0-cloud-orchestration-kubernetes.md codeguard-0-data-storage.md codeguard-0-devops-ci-cd-containers.md codeguard-0-file-handling-and-uploads.md codeguard-0-framework-and-languages.md codeguard-0-iac-security.md codeguard-0-input-validation-injection.md codeguard-0-logging.md codeguard-0-mcp-security.md codeguard-0-mobile-apps.md codeguard-0-privacy-data-protection.md codeguard-0-safe-c-functions.md codeguard-0-session-management-and-cookies.md codeguard-0-supply-chain-security.md codeguard-0-xml-and-serialization.md codeguard-1-crypto-algorithms.md codeguard-1-digital-certificates.md codeguard-1-hardcoded-credentials.md SKILL.md sources/ core/ codeguard-0-additional-cryptography.md codeguard-0-api-web-services.md codeguard-0-authentication-mfa.md codeguard-0-authorization-access-control.md codeguard-0-client-side-web-security.md codeguard-0-cloud-orchestration-kubernetes.md codeguard-0-data-storage.md codeguard-0-devops-ci-cd-containers.md codeguard-0-file-handling-and-uploads.md codeguard-0-framework-and-languages.md codeguard-0-iac-security.md codeguard-0-input-validation-injection.md codeguard-0-logging.md codeguard-0-mcp-security.md codeguard-0-mobile-apps.md codeguard-0-privacy-data-protection.md codeguard-0-safe-c-functions.md codeguard-0-session-management-and-cookies.md codeguard-0-supply-chain-security.md codeguard-0-xml-and-serialization.md codeguard-1-crypto-algorithms.md codeguard-1-digital-certificates.md codeguard-1-hardcoded-credentials.md codeguard-SKILLS.md.template owasp/ codeguard-0-ajax-security.md codeguard-0-attack-surface-analysis.md codeguard-0-authentication.md codeguard-0-authorization-testing-automation.md codeguard-0-authorization.md codeguard-0-bean-validation.md codeguard-0-browser-extension-vulnerabilities.md codeguard-0-c-based-toolchain-hardening.md codeguard-0-choosing-and-using-security-questions.md codeguard-0-ci-cd-security.md codeguard-0-clickjacking-defense.md codeguard-0-content-security-policy.md codeguard-0-cookie-theft-mitigation.md codeguard-0-credential-stuffing-prevention.md codeguard-0-cross-site-request-forgery-prevention.md codeguard-0-cross-site-scripting-prevention.md codeguard-0-cryptographic-storage.md codeguard-0-cw-cryptographic-security-guidelines.md codeguard-0-cw-memory-string-usage-guidelines.md codeguard-0-database-security.md codeguard-0-deserialization.md codeguard-0-django-rest-framework.md codeguard-0-django-security.md codeguard-0-docker-security.md codeguard-0-dom-based-xss-prevention.md codeguard-0-dom-clobbering-prevention.md codeguard-0-dotnet-security.md codeguard-0-error-handling.md codeguard-0-file-upload.md codeguard-0-forgot-password.md codeguard-0-graphql.md codeguard-0-html5-security.md codeguard-0-http-headers.md codeguard-0-http-strict-transport-security.md codeguard-0-injection-prevention.md codeguard-0-input-validation.md codeguard-0-insecure-direct-object-reference-prevention.md codeguard-0-jaas.md codeguard-0-java-security.md codeguard-0-json-web-token-for-java.md codeguard-0-key-management.md codeguard-0-kubernetes-security.md codeguard-0-laravel.md codeguard-0-ldap-injection-prevention.md codeguard-0-legacy-application-management.md codeguard-0-logging-vocabulary.md codeguard-0-mass-assignment.md codeguard-0-microservices-security.md codeguard-0-mobile-application-security.md codeguard-0-multifactor-authentication.md codeguard-0-network-segmentation.md codeguard-0-nodejs-docker.md codeguard-0-nodejs-security.md codeguard-0-npm-security.md codeguard-0-oauth2.md codeguard-0-open-redirect.md codeguard-0-os-command-injection-defense.md codeguard-0-password-storage.md codeguard-0-php-configuration.md codeguard-0-pinning.md codeguard-0-prototype-pollution-prevention.md codeguard-0-query-parameterization.md codeguard-0-rest-assessment.md codeguard-0-rest-security.md codeguard-0-ruby-on-rails.md codeguard-0-safe-c-functions.md codeguard-0-saml-security.md codeguard-0-securing-cascading-style-sheets.md codeguard-0-server-side-request-forgery-prevention.md codeguard-0-session-management.md codeguard-0-sql-injection-prevention.md codeguard-0-symfony.md codeguard-0-third-party-javascript-management.md codeguard-0-threat-modeling.md codeguard-0-transaction-authorization.md codeguard-0-transport-layer-security.md codeguard-0-unvalidated-redirects-and-forwards.md codeguard-0-user-privacy-protection.md codeguard-0-virtual-patching.md codeguard-0-vulnerable-dependency-management.md codeguard-0-web-service-security.md codeguard-0-xml-external-entity-prevention.md codeguard-0-xml-security.md codeguard-0-xs-leaks.md codeguard-0-xss-filter-evasion.md codeguard-0-zero-trust-architecture.md templates/ custom-rule-template.md.example src/ convert_to_ide_formats.py converter.py formats/ __init__.py agentskills.py antigravity.py base.py copilot.py cursor.py windsurf.py language_mappings.py LICENSE.md tag_mappings.py utils.py validate_unified_rules.py validate_versions.py uv.lock