secure-plugin-installer

OrionAIDev/secure-plugin-installer

★ 0 stars Python Security Updated today

Audit and gate third-party Claude Code plugins / OpenClaw skills before enabling them: capability enumeration, categorised pattern scanning, commit pinning, hash-chained trust ledger, per-MCP-server approval.

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "secure-plugin-instal": {
      "command": "uvx",
      "args": [
        "secure-plugin-installer"
      ]
    }
  }
}

Or install with pip: pip install secure-plugin-installer

README Excerpt

Cross-platform skill for auditing and gating third-party packages — **Claude Code plugins** (sourced from GitHub or any git-clonable URL) and **OpenClaw / ClawHub skills** (typically installed as plain directories under `/opt/<env>/workspace/skills/`). This document is the **comprehensive reference** for humans. The

Tools (6)

FalseSECURE_PLUGIN_INSTALLER_ALLOW_LLM_SCANTrueapprovalapproved_byprev_hash

Topics

anthropicclaudeclaude-codecode-auditopenclawpluginspythonsecuritystatic-analysissupply-chain-security

secure-plugin-installer

Quick Install

README Excerpt

Tools (6)

Topics

Related Security Servers