Help us improve
Share bugs, ideas, or general feedback.
From aikido
Runs an Aikido security scan on generated, added, or modified code files to detect SAST vulnerabilities and exposed secrets. Use when the user wants to scan code for security issues, after writing or modifying code, or when they mention Aikido, security scan, or SAST. Always run an Aikido scan after generating code to verify the generated code is free of security issues.
npx claudepluginhub aikidosec/aikido-claude-plugin --plugin aikidoHow this skill is triggered — by the user, by Claude, or both
Slash command
/aikido:scanThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
When scanning the code for security vulnerabilities using the Aikido MCP server:
Scans codebases for leaked secrets (API keys, tokens, passwords, private keys), insecure code patterns, and configuration issues. Returns severity-rated findings with file locations and remediation steps.
Runs lightweight mechanical security scans on project files or git changes. Filters findings by severity threshold, checks trends, and gates on errors for fast triage.
Share bugs, ideas, or general feedback.
When scanning the code for security vulnerabilities using the Aikido MCP server:
If the Aikido MCP server is not available or fails to start, inform the user:
The Aikido MCP server is required for security scanning but is not available. Install it following the setup guide at reference.md.