Awesome Claude Code Security
Description
A awesome curated list of security resources, hardening tools, threat research, and governance frameworks specifically for Claude Code
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Awesome Claude Code Security
[](https://awesome.re) [](https://www.trackawesomelist.com/awesome-claude-code-security) [](https://creativecommons.org/licenses/by/4.0/) [](CONTRIBUTING.md) [](https://github.com/anthropics/claude-code)
**A curated collection of security resources, hardening tools, threat research, and governance frameworks for [Claude Code](https://code.claude.com) and the AI coding agent ecosystem.**
*For security engineers, AppSec teams, platform engineers, and anyone deploying Claude Code in production.*
[Official Docs](#-official-security-documentation) · [Hardening](#-hardening-and-permissions) · [MCP Security](#-mcp-security) · [Tools](#-security-tools-and-scanners) · [Enterprise](#-enterprise-governance-and-policy) · [Research](#-research-talks-and-writeups)
**Why this list?** Claude Code runs shell commands, edits files, calls APIs, and installs MCP servers — all with your user privileges. One malicious `.claude/settings.json`, a poisoned MCP tool, or a prompt injection hidden in a README can lead to RCE, credential theft, or silent data exfiltration. This list exists to help you harden, govern, and monitor every surface.
Contents
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,