settivishal

Prdeck — Security skill for Claude Code

Security community

PR feed, review pane and security checks above the Claude Code prompt.

How to install Prdeck

This entry records only its repository, not the path inside it, so there is no exact command to give. Open settivishal/prdeck and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Prdeck does

PR feed, review pane and security checks above the Claude Code prompt.

Alternatives in Security

  • Free Code — The free build of Claude Code 8.1k ★
  • Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
  • Promptmap — Security scanner for custom LLM apps 1.2k ★

README

prdeck

A Claude Code mod that puts your pull requests and security findings above the prompt. Review, approve, merge — without leaving the terminal.

● security  2 high · 1 low  (+1)                        1: details
  ██████████████ ████ ██  5 files · +172/−29        ← strip: churn / ci / timeline, 3 cycles
⇄ 3 PRs · #42 fix login · ✓4 ◐1 · changes requested  (+1 new)   2: PRs

Install

claude plugin marketplace add settivishal/prdeck
claude plugin install prdeck@prdeck

Requires Claude Code 2.1.278+ and, for the PR row, [`gh`](https://cli.github.com) logged in (`gh auth login`). Repos without a GitHub remote get the security row only.

What it does

**Security row** — scans your branch against its base (merge-base, working tree and untracked files included) for secrets, private keys, `eval`, shell exec, SQL string concat, unsafe deserialization, `innerHTML`, TLS verification off, `chmod 777`, plain `http://`. Colour is the worst severity; `(+N)` means the last turn added findings.

**Strip** — the bar under the security row; `3` cycles three views, hover any for its legend:

  • churn — a treemap of your branch: one bar per changed file, width by lines changed, hot files (with a finding) first in red, then orange > yellow > green; totals at the end; hover lists the hot files.
  • ci — the last 30 workflow runs on your current branch, one cell each, newest right: green ok, red failed, yellow running; hover shows the latest five by name.
  • timeline — one cell per turn this session: blue edited files, green ran tests, red aborted or refused, grey neither.

When the branch goes from findings to clean: confetti. Pending checks spin. Hover `⇄` to peek at the top three PRs without opening the pane.

**Haiku triage** — every regex hit is rated by Haiku once (`high` / `med` / `low` / false positive) and cached; false positives vanish from the bar, the reason shows in the pane. Off in `/config` if you'd rather not spend the tokens.

**Git gua