plugin

sec-default No issues

Name: sec-default
Author: Anthropic

Anthropicanthropics/claude-codeupdated 3 days ago

Security default for organizations: seated outermost, it keeps the organization's classic hooks, prompt content, settings, tool policy and pinned environment out of reach of the plugins a person installs, and adds no policy of its own; one managed option, allowManagedModsOnly, limits mods to the organization's.

Anthropic's own description, from the plugin's files.

Engineering Finance AI & agentsplugin

Stars: 154,405
Version: v1
Copies: 0

Overview Security0 Versions1 Files196

Overview

allowNo issues found

Waxell's checks found nothing alarming in what's published.

Highest severity: none
Findings: 0
What ran: Static analysis

A clean result means nothing alarming in what is published, not a guarantee. How the checks work

We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.

Security

Security scan

Checked 2 days ago

Result

No issues Waxell's checks found nothing alarming in what's published.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (0)

No findings in what's published.

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1 (0.1.0), seen 2026-11-03.

Files

196 files, 208 KB in total. Names only; open them on GitHub.

.claude-plugin/plugin.json
README.md
hooks/admission-failure/admission-failure.ts
hooks/admission-failure/index.ts
hooks/held-verdict/ask-kind.ts
hooks/held-verdict/caught-answer.ts
hooks/held-verdict/held-kind.ts
hooks/held-verdict/held-notice.ts
hooks/held-verdict/index.ts
hooks/held-verdict/verdicts/holds-over.ts
hooks/held-verdict/verdicts/index.ts
hooks/held-verdict/verdicts/is-same-verdict.ts
hooks/held-verdict/verdicts/plugin-of.ts
hooks/held-verdict/verdicts/ranking/handed-to.ts
hooks/held-verdict/verdicts/ranking/index.ts
hooks/held-verdict/verdicts/ranking/is-looser.ts
hooks/held-verdict/verdicts/ranking/leniency/index.ts
hooks/held-verdict/verdicts/ranking/leniency/leniency.ts
hooks/held-verdict/verdicts/ranking/tiers-holding-users/index.ts
hooks/held-verdict/verdicts/ranking/tiers-holding-users/tiers-holding-users.ts
hooks/held-verdict/verdicts/rewritten-by-users.ts
hooks/held-verdict/verdicts/stamped-verdict.ts
hooks/held-verdict/verdicts/unchecked-deny.ts
hooks/hooks.json
hooks/index.ts
hooks/managed-mods-only-refusal/index.ts
hooks/managed-mods-only-refusal/managed-mods-only-refusal.ts
hooks/past-users/index.ts
hooks/past-users/past-users.ts
hooks/past-users/provided/index.ts
hooks/past-users/provided/provided-next.ts
hooks/past-users/provided/provided.ts
hooks/past-users/user-reachable-tiers/index.ts
hooks/past-users/user-reachable-tiers/user-reachable-tiers.ts
hooks/pinned-variable-refusal/index.ts
hooks/pinned-variable-refusal/pinned-variable-refusal.ts
hooks/policy/code-loading-variables.ts
hooks/policy/create-policy-memo/create-policy-memo.ts
hooks/policy/create-policy-memo/index.ts
hooks/policy/decided-by-policy.ts
hooks/policy/deny-rules-hold.ts
hooks/policy/has-mcp-allowlist.ts
hooks/policy/index.ts
hooks/policy/is-managed-mods-only.ts
hooks/policy/is-person-writable.ts
hooks/policy/is-pinned-variable.ts
hooks/policy/managed-tools-restored/index.ts
hooks/policy/managed-tools-restored/is-org-tool/index.ts
hooks/policy/managed-tools-restored/is-org-tool/is-org-tool.ts
hooks/policy/managed-tools-restored/is-org-tool/is-server-file-unreadable/index.ts
hooks/policy/managed-tools-restored/is-org-tool/is-server-file-unreadable/is-server-file-unreadable.ts
hooks/policy/managed-tools-restored/is-org-tool/org-names/index.ts
hooks/policy/managed-tools-restored/is-org-tool/org-names/org-names.ts
hooks/policy/managed-tools-restored/is-org-tool/org-plugin-names/folded-id.ts
hooks/policy/managed-tools-restored/is-org-tool/org-plugin-names/forms-of.ts
hooks/policy/managed-tools-restored/is-org-tool/org-plugin-names/index.ts
hooks/policy/managed-tools-restored/is-org-tool/org-plugin-names/is-enabled-entry.ts
hooks/policy/managed-tools-restored/is-org-tool/org-plugin-names/name-of-id.ts
hooks/policy/managed-tools-restored/is-org-tool/org-plugin-names/org-plugin-names.ts
hooks/policy/managed-tools-restored/is-org-tool/org-server-names/index.ts
hooks/policy/managed-tools-restored/is-org-tool/org-server-names/org-server-names.ts
hooks/policy/managed-tools-restored/is-org-tool/spellings-of/index.ts
hooks/policy/managed-tools-restored/is-org-tool/spellings-of/spellings-of.ts
hooks/policy/managed-tools-restored/is-org-tool/tool-prefix-of/folded-name/folded-name.ts
hooks/policy/managed-tools-restored/is-org-tool/tool-prefix-of/folded-name/index.ts
hooks/policy/managed-tools-restored/is-org-tool/tool-prefix-of/index.ts
hooks/policy/managed-tools-restored/is-org-tool/tool-prefix-of/tool-prefix-of.ts
hooks/policy/managed-tools-restored/managed-tools-restored.ts
hooks/policy/names-org-tool.ts
hooks/policy/own-option/index.ts
hooks/policy/own-option/member-of/index.ts
hooks/policy/own-option/member-of/member-of.ts
hooks/policy/own-option/own-option.ts
hooks/policy/own-option/own-options-path/index.ts
hooks/policy/own-option/own-options-path/own-options-path.ts
hooks/policy/pinned-names.ts
hooks/policy/policy-memo-ms.ts
hooks/policy/policy-source-variables.ts
hooks/policy/process-wrapper-variable.ts
hooks/policy/source.ts
hooks/register.ts
hooks/skill-row/index.ts
hooks/skill-row/is-skill-row.ts
hooks/skill-row/skill-tool.ts
hooks/tool-register-refusal/index.ts
hooks/tool-register-refusal/register-refusal-of.ts
hooks/tool-register-refusal/server-name-refusal.ts
hooks/tool-register-refusal/tool-register-refusal.ts
tests/fixtures/agent-offered.ts
tests/fixtures/agent-spawned.ts
tests/fixtures/allowlist.ts
tests/fixtures/answering-reads.ts
tests/fixtures/blanking-rows.ts
tests/fixtures/command-described.ts
tests/fixtures/compacted-turn.ts
tests/fixtures/compacting.ts
tests/fixtures/compaction-row.ts
tests/fixtures/composed.ts
tests/fixtures/denying.ts
tests/fixtures/dropping-attachments.ts
tests/fixtures/dropping.ts
tests/fixtures/emptying.ts
tests/fixtures/fullscreen.ts
tests/fixtures/heading.ts
tests/fixtures/hook-context-row.ts
tests/fixtures/hook-note.ts
tests/fixtures/index.ts
tests/fixtures/listing.ts
tests/fixtures/logged-by.ts
tests/fixtures/logged.ts
tests/fixtures/logging.ts
tests/fixtures/lower-case-pinning-policy.ts
tests/fixtures/managed-mods-only.ts
tests/fixtures/managed-policy.ts
tests/fixtures/marking.ts
tests/fixtures/memory.ts
tests/fixtures/mods-policy-of.ts
tests/fixtures/no-allowlist.ts
tests/fixtures/noting.ts
tests/fixtures/odd-providers.ts
tests/fixtures/org-providers.ts
tests/fixtures/pinning-policy.ts
tests/fixtures/policy-by-source.ts
tests/fixtures/policy-command.ts
tests/fixtures/policy-reads.ts
tests/fixtures/policy-until-stopped.ts
tests/fixtures/prompt-row.ts
tests/fixtures/read-message-row.ts
tests/fixtures/reading-proxy.ts
tests/fixtures/reading.ts
tests/fixtures/registered-tool-of.ts
tests/fixtures/registering.ts
tests/fixtures/relabeling.ts
tests/fixtures/reminder-row.ts
tests/fixtures/repointing-settings.ts
tests/fixtures/revaluing.ts
tests/fixtures/rewording.ts
tests/fixtures/seated-suite.ts
tests/fixtures/server-policy.ts
tests/fixtures/session.ts
tests/fixtures/setting-bash-env.ts
tests/fixtures/setting-dyld-insert.ts
tests/fixtures/setting-ld-preload.ts
tests/fixtures/setting-lower-case.ts
tests/fixtures/setting-node-options.ts
tests/fixtures/setting-other.ts
tests/fixtures/setting-proxy.ts
tests/fixtures/signing.ts
tests/fixtures/skill-row.ts
tests/fixtures/stripping.ts
tests/fixtures/subjects-echoed.ts
tests/fixtures/suite-tools.ts
tests/fixtures/tool-check/allowed.ts
tests/fixtures/tool-check/allowing-bash.ts
tests/fixtures/tool-check/allowing-read.ts
tests/fixtures/tool-check/allowing.ts
tests/fixtures/tool-check/asked.ts
tests/fixtures/tool-check/asking.ts
tests/fixtures/tool-check/blind-allowing.ts
tests/fixtures/tool-check/ceiling-allow.ts
tests/fixtures/tool-check/ceiling-ask.ts
tests/fixtures/tool-check/checked-read.ts
tests/fixtures/tool-check/checked.ts
tests/fixtures/tool-check/checks-answered-in-turn.ts
tests/fixtures/tool-check/checks-answered.ts
tests/fixtures/tool-check/forging.ts
tests/fixtures/tool-check/hook-ask.ts
tests/fixtures/tool-check/hook-deny.ts
tests/fixtures/tool-check/host-ask.ts
tests/fixtures/tool-check/index.ts
tests/fixtures/tool-check/link-of.ts
tests/fixtures/tool-check/listening.ts
tests/fixtures/tool-check/muting.ts
tests/fixtures/tool-check/override-policy-of.ts
tests/fixtures/tool-check/plain-deny.ts
tests/fixtures/tool-check/rewriting.ts
tests/fixtures/tool-check/rule-ask.ts
tests/fixtures/tool-check/rule-deny.ts
tests/fixtures/tool-check/setting-ask.ts
tests/fixtures/tool-check/sneaking.ts
tests/fixtures/tool-check/tightening.ts
tests/fixtures/tool-described.ts
tests/fixtures/tools-command.ts
tests/fixtures/tools-registered.ts
tests/fixtures/tools.ts
tests/fixtures/unfoldable-policy.ts
tests/fixtures/unsetting-node-options.ts
tests/fixtures/unsetting-proxy.ts
tests/fixtures/user-reachable-providers.ts
tests/fixtures/variables-set.ts
tests/fixtures/wrapping-policy.ts
tests/held-verdict.test.ts
tests/policy/create-policy-memo.test.ts
tests/policy/deny-rules-hold.test.ts
tests/policy/is-managed-mods-only.test.ts
tests/register.test.ts

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

Book a demo

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More engineering skills and plugins

See all