Home / Plugins / security-sweep
security-sweep
Onome-AJ/security-sweep-pluginPlugin
Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command injection, SSRF), authentication issues (JWT misuse, weak password hashing)misconfigurations (CORS, debug mode, insecure TLS, Docker/K8s), dependency risks, AI-specific vulnerabilities (prompt injection, API key exposure, excessive agent permissions), mobile security issues (Android/iOS), and data exposure (PII in logs, weak crypto). Covers OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Supports Python, JavaScript/TypeScript, Java/Kotlin, Go, Ruby, PHP, C#, Swift, and Dart with framework-aware checks that reduce false positives.
Why this score
Popularity score: 44/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Nov 4, 2026 at commit 6ca48b6ef582, with Cisco's open-source skill-scanner.
Results for this version aren't published yet.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onesecurity-sweep Onome-AJ/security-sweep-plugin · Plugin | 44 | ★ 14 | not measured | 7mo ago |
| security-guidance anthropics/claude-plugins-official · Plugin Both about security and xss | 79 | ★ 46k | not measured | today |
| 09-web-security Masriyan/Claude-Code-CyberSecurity-Skill · Skill Both about security and owasp | 66 | ★ 490 | ≈21 always | 19d ago |
| security-auditor kid-sid/claude-spellbook · Subagent Same job: trading & investing | 53 | ★ 190 | ≈116 in chat | 3mo ago |
| resolve-docker-vulnerabilities firebase/firebase-tools · Skill Also for Docker | 82 | ★ 4.5k | ≈52 always | 16d ago |
| docsite-link-sweep googleapis/mcp-toolbox · Skill Both about sweep | 85 | ★ 17k | ≈26 always | 16d ago |