npx claudepluginhub netresearch/claude-code-marketplace --plugin coach/scanScans current codebase for security vulnerabilities via SAST, dependency CVEs (npm/pip/composer), and config issues. Outputs structured report with severity ratings, findings, and remediation steps.
/scanScans configured MCP servers for security vulnerabilities and policy violations using clawdstrike_scan tool. Groups findings by severity with remediation steps and summary.
/scanRuns automated security scans for dependencies, secrets, and licenses; triages results by severity and generates prioritized reports with fix recommendations.
/scanMaps project architecture, entry points, and attack surface by running the Perseus reconnaissance phase.
/scanRun Semgrep, CodeQL, and Joern scan branches and emit a shared findings artifact
Proactively scan the project for outdated tools and dependencies.
Run the skill analyzer scan:
python3 ${CLAUDE_PLUGIN_ROOT}/scripts/skill_analyzer.py --scan --verbose
Review the findings:
For each finding, generate a learning candidate if appropriate:
Report summary to user:
/coach reviewScanning project dependencies...
Checking installed skills...
Findings:
Outdated tools/packages: 3
Installed skills: 5
Generated candidates: 2
Tool/Package Issues:
- node: 16.0 → 18+ (recommended)
- lodash: 4.17.20 → 4.17.21
- axios: 0.21.4 → 1.6.2
Run /coach review to see generated update candidates.