Claude Code commands for Security
Flowy lists 634 slash commands for Security, and the most-starred are deslop-reborn, pr-shepherd and ship, all three from the 12,676-star ironclaw plugin. That plugin was last pushed on October 25, 2026.
deslop-reborn Commandpr-shepherd Commandship Commandaudit Commandaudit
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
@trailofbitsInstall Commandburp-search Commandct-check Commandagt-check Commandagt-check
Check text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
@microsoftInstall Commandagt-status Commandagt-status
Show the active AGT governance status for this Claude Code session.
@microsoftInstall Commandarsenal Commandarsenal
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…
@awarexoneInstall Commandautopilot Commandautopilot
Run autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable…
@awarexoneInstall Commandbreach-check Commandbreach-check
HIBP k-anonymity check on a password wordlist. Enriches each password with its breach count, ranks DESC. Free API (no key), only…
@awarexoneInstall Commandarsenal Commandarsenal
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…
@shuvonsecInstall Commandautopilot Commandautopilot
Run autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable…
@shuvonsecInstall Commandbreach-check Commandbreach-check
HIBP k-anonymity check on a password wordlist. Enriches each password with its breach count, ranks DESC. Free API (no key), only…
@shuvonsecInstall Commandautopilot Commandautopilot
Run autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable…
@elementalsoulsInstall Commandchain Commandchain
Build an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common chain patterns:…
@elementalsoulsInstall Commandhunt Commandhunt
Active vulnerability hunting. Two-track dispatcher — asks Red Team vs WAPT, hands off to hunt-dispatch skill and sibling…
@elementalsoulsInstall Commandagents-for Commandagents-for
List pentest-ai agents relevant to a domain or tag (web, ad, cloud, mobile, recon, etc.).
@0xstephInstall Commandmemory Commandmemory
{ "name": "memory", "description": "Update the project memory with what was accomplished in this session", "prompt": "Update the…
@0xstephInstall Commandrecommend Commandrecommend
Recommend the right pentest-ai agent and concrete next steps for a freeform task description.
@0xstephInstall Commandcti Commandcti
THE ENTRY POINT for cti-expert. Investigate any target — domain, IP, email, username, phone, wallet, hash or APK. Routes to the…
@7onezInstall Commandcti-case Commandcti-case
Run the full deterministic pipeline on one or more seeds: collect, ingest, prior-overlap, risk, cluster, ICD-203 assessment.…
@7onezInstall Commandcti-check Commandcti-check
False-positive control — is this indicator a real operator link or shared noise? Run BEFORE clustering on anything. Usage:…
@7onezInstall Commanddecompile Commandimport-skill Commandimport-skill
Import a skill from a GitHub URL into the curated marketplace. Downloads, transforms to meet plugin standards, validates, and…
@trailofbitsInstall Commandplan Commandplan
Create planning files (task_plan.md, findings.md, progress.md) for a new task
@trailofbitsInstall Commandreview-plugin Commandreview-plugin
Reviews a plugin for quality, correctness, and CLAUDE.md conformance. Fixes all issues found. Use after importing or modifying a…
@trailofbitsInstall Commandrelease Commandrelease
Prepare a new release for sandvault. This command updates the changelog, bumps the version, and creates a PR
@webcoyoteInstall Commandadd-document Commandanalyze-questionnaire Commandannex-a-deep-dive Commandannex-a-deep-dive
Deep dive analysis of ISO 27001 Annex A control domains with implementation guidance
@grcengclubInstall Commandengage.actions Commandengage.actions
Execute Phase 7 - Actions on Objectives and Goal Achievement
@hypnguyen1209Install Commandengage.c2 Commandengage.crash Commandengage.crash
Crash → root cause → reachability → empirical exploitability verdict (native bugs)
@hypnguyen1209Install Commandapply-self-review Commandapply-self-review
Apply the approved improvements from the latest memory-self-review PROPOSAL. Auto-applies the safe, reversible doc/memory edits…
@ucsandmanInstall Commanddashclaw-postcommit Commanddashclaw-postcommit
Post-commit verification wave — dispatch gate-runner, drift-auditor, and
@ucsandmanInstall Commanddashclaw-quality Commanddashclaw-quality
Recurring find-and-fix quality pass over the whole DashClaw app — browser smoke (frontend-verify) + code gates → triage →…
@ucsandmanInstall Commandplamen Commandplamen
Launch the V2 deterministic Smart Contract audit pipeline (same as /plamen-wizard). Usage: /plamen [light|core|thorough] [path]
@plamentsvInstall Commandplamen-l1 Commandplamen-l1
Launch the V2 deterministic L1 audit pipeline for Go/Rust node clients (same as /plamen-l1-wizard). Experimental.
@plamentsvInstall Commandplamen-l1-wizard Commandplamen-l1-wizard
Plamen v2 L1 infrastructure audit wizard. Collects config, launches deterministic driver.
@plamentsvInstall Commandhardening-status Commandaudit Commandpolicy Commandposture Commandadapter Commandauth Commandfeature Commandinstall Commandinstall
Install the prompt injection defender hooks into your Claude Code project.
@lasso-securityInstall Command
Questions
What is the best Security slash command for Claude Code?
By the GitHub stars of the plugin each ships in (Flowy does not rate quality), the best Security slash command for Claude Code is deslop-reborn, level on stars with pr-shepherd and ship, all three from the 12,676-star ironclaw plugin.
How many Security slash commands are there?
Flowy lists 634 slash commands for Security, and this page draws the top 48 Security slash commands.
How to install a slash command
Security in other kinds
Other slash command categories
- Development5,783
- Agent Orchestration788
- Automation722
- Productivity405
- Documentation320
- AI & Agents283
- Agent Memory249
- Testing200
- Content192
- Design172
- Data136
- Finance117
- Monitoring117
- Research107
- Marketing103
- Agent Workspaces100
- Skill Authoring95
- Spec-Driven Development85
- Education58
- SEO57
- Cloud & Infrastructure41
- Business34
- Backend32
- Code Generation30
- Writing29
- CLI Tools27
- Code Review26
- Operations26
- Product25
- Career24
- Machine Learning24
- Mobile22
- Legal16
- Scaffolding16
- Entertainment14
- MCP Servers14
- Frontend13
- Databases11
- Debugging7
- Video & Audio7
- API Design6
- Deployment6
