Name: security-scan
Author: shumatsumonobu

What is security-scan?

security-scan is a Claude Code mod by shumatsumonobu that 変更中のファイルを Semgrep で検査し、検出結果を画面の右で1件ずつ選別、本物だけ Claude に修正を依頼. It is listed under Security and has no public popularity data yet.

Type	Claude code mod
Author	shumatsumonobu
Repository	shumatsumonobu/claude-mods-bench
Popularity	no public popularity data yet
Category	Security
Security	Low risk (84/100)
Rank	#4,616 of 5,272 Claude Code mods; #486 in Security
License	MIT
Last commit	2026-10-17
Hooks	3 events
Sees	only the events it hooks
Draws on	Pane, AbovePrompt

Is security-scan safe to install?

security-scan scores 84/100 on the MCPMods security check: Low risk. Things to review: starts processes outside the sandbox. It passed 6 of 8 checks.

Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.

Check	Result
No network access	Pass
Starts processes outside the sandbox	Review
Writes no files or config	Pass
Doesn't read environment variables	Pass
Only sees the events it hooks	Pass
Drives Claude (model calls, prompts)	Note
Passes claude plugin validate	Pass
Has an open-source license	Pass

API calls in its code

Call	What it means
`$.clock.after`
`$.command.register`
`$.fs.read`	reads files
`$.process.run`	runs processes
`$.prompt.submit`	drives Claude
`$.session.cwd`
`$.store.get`	keeps its own state
`$.store.set`	keeps its own state
`$.ui.invalidate`	draws interface
`$.ui.open`	draws interface
`$.ui.resolve`	draws interface
`$.ui.toast`	draws interface

How do I install security-scan?

Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
```
claude --version
```

Read its footprint. This lists every event it hooks and every API call it makes, without running it.

git clone https://github.com/shumatsumonobu/claude-mods-bench
claude plugin validate ./claude-mods-bench/mods/security-scan

Install it. Run this in your terminal, then /reload-plugins in an open session.

claude plugin marketplace add shumatsumonobu/claude-mods-bench && claude plugin install security-scan@claude-mods-bench

Or ask Claude to set it up

Paste this into Claude Code and it installs security-scan for you:

Install the "security-scan" Claude Code mod from https://github.com/shumatsumonobu/claude-mods-bench/tree/main/mods/security-scan. Run claude plugin validate on it first and show me what it can access before you enable it.

What is security-scan?

Is security-scan safe to install?

API calls in its code

How do I install security-scan?

Or ask Claude to set it up

More from shumatsumonobu/claude-mods-bench