plugin-auditor

secawa-com/plugin-auditor

★ 0 stars Shell 🔒 Security Updated today

Static security audit for Claude Code plugins, skills, agents, hooks, and MCP servers. Detects backdoors, prompt injection, persistence hooks, and supply-chain risks via parallel sub-agents.

View on GitHub →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "plugin-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "secawa-com/plugin-auditor"
      ]
    }
  }
}

README Excerpt

Static security audit for projects extending Claude (skills, agents, hooks, plugins, MCP servers, slash commands, etc.) before installing them in Claude Code. Detects backdoors, prompt injection, persistence hooks, and supply-chain risks via parallel sub-agents. **Author**: Piotr Kaźmierczak - CEO [Secawa](https://secawa.com) \

Tools (4)

CAUTIONSAFEUNSAFEaudit

plugin-auditor

Quick Install

README Excerpt

Tools (4)

Related Security Servers