Delegate security engineering tasks to an AI agent that performs vulnerability assessments, fixes issues like SQL injection and XSS, implements authentication with OAuth/JWT and RBAC, protects PII, conducts threat modeling, code reviews, and ensures OWASP/GDPR compliance in your codebase.
npx claudepluginhub thebushidocollective/han --plugin do-securityShip-ready code from your AI coding agent. 139+ plugins for quality gates, tooling, memory, and specialized agents — so your AI writes code that's ready to merge.
Two commands. That's it.
# 1. Install the CLI
curl -fsSL https://han.guru/install.sh | bash
# 2. Auto-detect and install plugins for your project
han plugin install --auto
Next time you use Claude Code, validation hooks run automatically when you finish a conversation.
# Homebrew (macOS/Linux)
brew install thebushidocollective/tap/han
139 plugins across six categories:
| Category | Description | Examples |
|---|---|---|
| Core | Essential infrastructure. Auto-installs han binary, provides metrics and MCP servers | Always required |
| Languages | Validation plugins for your language/runtime | TypeScript, Rust, Python, Go, Ruby |
| Validation | Linters, formatters, and quality tools | Biome, ESLint, ShellCheck, Pytest |
| Disciplines | Specialized AI agents for engineering domains | Security, accessibility, API design, architecture |
| Services | MCP servers for external platforms | GitHub, GitLab, Linear |
| Tools | MCP servers for development utilities | Playwright, Blueprints, Context7 |
Browse all plugins at han.guru/plugins
--auto flag detects your stack automatically# Install plugins
han plugin install # Interactive mode
han plugin install --auto # Auto-detect your stack
han plugin install <name> # Install specific plugin
# Manage plugins
han plugin search <query> # Search marketplace
han plugin uninstall <name> # Remove plugin
# Run hooks manually
han hook run <plugin> <hook> # Run a specific hook
han hook explain # Show configured hooks
# MCP server
han mcp # Start MCP server for natural language hook execution
Full documentation at han.guru/docs
See CONTRIBUTING.md for how to create new plugins.
MIT License - see LICENSE
Built by The Bushido Collective
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.
Specialized security review subagent
Security best practices advisor with vulnerability detection and fixes
Secure coding, OWASP guidance, input validation, cryptography, authentication, and secrets management for secure application development.
Agents for code review, security audits, debugging, and quality assurance
Uses power tools
Uses Bash, Write, or Edit tools
Share bugs, ideas, or general feedback.
Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claim