Ghost Security Skills/Plugin Marketplace

Plugin marketplace repository for Ghost Security's AI-native application security skills for Claude Code.

Quick Installation

With Claude Code:

claude plugin marketplace add ghostsecurity/skills
claude plugin install ghost@ghost-security
claude
Installing the Ghost Security Agent Plugin with Skills

Alternatively, install the skills plugin within Claude Code:

/plugin marketplace add ghostsecurity/skills
/plugin install ghost@ghost-security

Currently, you will need to restart Claude Code for the plugin to load.

Comprehensive Documentation

Full documentation, tutorials, and video guides at ghostsecurity.ai.

Skills in this Repository Marketplace

Ghost Plugin (with skills).

Skill Description
ghost-repo-context Build shared repository context (business criticality, sensitive data, component map)
ghost-scan-deps Exploitability analysis of dependency vulnerabilities (SCA)
ghost-scan-secrets Context assessment of detected secrets and credentials
ghost-scan-code AI-powered detection of code security issues (SAST)
ghost-report Combined security report across all scan results
ghost-validate Dynamic validation of findings against a live application (DAST)
ghost-proxy HTTP proxy for the ghost-validate skill
ghost-exo Build, improve, and debug workflows on the exo agent orchestration platform

ghost-repo-context

Running the Ghost Security Agent repository context skill

ghost-scan-code

Running the Ghost Security Agent scan code skill

ghost-scan-deps

Running the Ghost Security Agent scan depdendencies skill

ghost-scan-secrets

Running the Ghost Security Agent scan secrets skill

ghost-validate

Running the Ghost Security Agent scan secrets skill

ghost-report

Running the Ghost Security Agent report skill

Contributions, Feedback, Feature Requests, and Issues

Open an Issue per the Contributing guidelines and Code of Conduct

License

This repository is licensed under the Apache License 2.0. See LICENSE for details.

S
Description
ghost-scan-code: Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS,…; ghost-scan-secrets: Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and…; ghost-scan-deps: Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies…
Readme 68 MiB
Languages
Python 89.2%
Shell 10.8%