By anthropics
Validate file edits and writes for security risks like command injection, XSS, and unsafe code patterns before changes are applied. Receive warnings from a Python script triggered on PreToolUse, blocking potentially dangerous modifications to keep code secure during development.
npx claudepluginhub anthropics/claude-plugins-official --plugin security-guidanceA curated directory of high-quality plugins for Claude Code.
⚠️ Important: Make sure you trust a plugin before installing, updating, or using it. Anthropic does not control what MCP servers, files, or other software are included in plugins and cannot verify that they will work as intended or that they won't change. See each plugin's homepage for more information.
/plugins - Internal plugins developed and maintained by Anthropic/external_plugins - Third-party plugins from partners and the communityPlugins can be installed directly from this marketplace via Claude Code's plugin system.
To install, run /plugin install {plugin-name}@claude-plugins-official
or browse for the plugin in /plugin > Discover
Internal plugins are developed by Anthropic team members. See /plugins/example-plugin for a reference implementation.
Third-party partners can submit plugins for inclusion in the marketplace. External plugins must meet quality and security standards for approval. To submit a new plugin, use the plugin directory submission form.
Each plugin follows a standard structure:
plugin-name/
├── .claude-plugin/
│ └── plugin.json # Plugin metadata (required)
├── .mcp.json # MCP server configuration (optional)
├── commands/ # Slash commands (optional)
├── agents/ # Agent definitions (optional)
├── skills/ # Skill definitions (optional)
└── README.md # Documentation
Please see each linked plugin for the relevant LICENSE file.
For more information on developing Claude Code plugins, see the official documentation.
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Modifies files
Hook triggers on file write and edit operations
Share bugs, ideas, or general feedback.
The most comprehensive Claude Code plugin — 36 agents, 142 skills, 68 legacy command shims, and production-ready hooks for TDD, security scanning, code review, and continuous learning
Efficient skill management system with progressive discovery — 410+ production-ready skills across 33+ domains