‹ The Index

Security Watchdog

plugin

Automatic security scanner for Claude Code plugins — detects new or updated extensions at session start and scans them for prompt injection, malicious hook scripts, and data exfiltration. The Problem LLM extension ecosystems are a novel attack surface. Traditional security tooling does not cover two threats unique to AI extensions: - Host attacks — hook scripts run shell commands automatically on session start, with full user privileges - Mind attacks — skill and command files ar

Works with: Claude Code, Cursor, Claude Desktop, Codex CLI, Gemini CLI, Cline, Windsurf, VS Code

Category: Security — see all ranked ›

Security audit

Not scanned yet. We audit npm-published capabilities for known advisories, install-time scripts and permission surface; this one has no npm package we can resolve, or has not reached the queue.

source ↗  ·  plugin:entelligentsia/skillforge/security-watchdog

Already running this? npx tashan-cli doctor checks your whole config against the Index — how it works ›