Agent Security

[](https://badge.fury.io/py/claude-secret-scan) [](https://opensource.org/licenses/Apache-2.0) []() [](https://github.com/mintmcp/agent-security/actions) [](https://pepy.tech/project/claude-secret-scan)

Security plugins for Claude Code and Cursor

This repository currently provides a secrets scanner plugin.

Motivation

Coding agents are powerful, but we've repeatedly seen them read and propagate sensitive data during everyday work. That can be acceptable for casual "vibe coding" experiments, but it's not acceptable for production software engineering. We built this to make accidental leakage much harder: a standalone, local-first scanner with minimal footprint (no external dependencies, regex-only), running as editor/agent hooks entirely on your machine, and easy to set up so teams can adopt it without friction.


Install

Claude Code Plugin Marketplace

Install via the [Claude Code plugin marketplace](https://www.anthropic.com/news/claude-code-plugins):

/plugin marketplace add mintmcp/agent-security
/plugin install secrets-scanner@agent-security

PyPI (manual hooks)

pipx install claude-secret-scan
# or
python3 -m pip install --user claude-secret-scan

Add hooks to `~/.claude/settings.json` if using PyPI: