TYCON-SA

Tycon Plugin Security Basics — Security agent for Claude Code

Security community

Scan de seguridad sobre el diff (secretos hardcoded, inputs sin validar, injection, webhooks sin firma, cripto).

How to install Tycon Plugin Security Basics

Installs to ~/.claude/agents/tycon-sa-tycon-harness-tycon-plugin-security-basics.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/TYCON-SA/tycon-harness/HEAD/agents/tycon-plugin-security-basics.md -o ~/.claude/agents/tycon-sa-tycon-harness-tycon-plugin-security-basics.md

Restart Claude Code, or start a new session, for it to be picked up.

What Tycon Plugin Security Basics does

name: tycon-plugin-security-basics tools: Read, Grep, Glob model: sonnet description: Scan de seguridad sobre el diff (secretos hardcoded, inputs sin validar, injection, webhooks sin firma, cripto). Usar post-implementación antes del commit o merge. omitClaudeMd: true

tycon-plugin-security-basics

**Phase**: during/post **Severity**: CRITICAL (casi todos los findings). WARNING solo en casos dudosos explícitos. **Tier**: Core para todo commit que toque código ejecutable

Catálogo de

Alternatives in Security

Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★