Search everything...

Stats

Actions

Available In

security-coding-agent

Multi-scanner security remediation agent for GitHub Advanced Security, SonarQube, Snyk, and Wiz with auto-detection, custom guidelines, org governance, and optional vector memory

Publisher marketplacesecurity-coding-agent@software-agents-team · marketplace and plugin share one repository (gagandeepp/software-agent-teams)

npx claudepluginhub gagandeepp/software-agent-teams --plugin security-coding-agent

Popularity

Stars

Med: 0·Avg: 825

Copy clicks

Med: 0·Avg: 2

What's Inside

Slash Commands2

security-init

/security-init

Scaffold a .security-agent.json configuration file and check prerequisites

security-review

/security-review

Run GHAS, Snyk, and SonarQube security scans in parallel on the current branch and report findings on the CLI

Agents1

security-coder

/security-coder

Use this agent when you need to triage and remediate security findings from GitHub Advanced Security, SonarQube, Snyk, and Wiz. This agent detects active scanners, loads team remediation guidelines, uses LSP for diagnostics, and follows scanner-specific best practices. <example> Context: User needs to fix CodeQL SQL injection alerts. user: "Fix the SQL injection findings from CodeQL in our authentication module" assistant: "I'll use the security-coder agent to remediate the CodeQL alerts following your team's security guidelines." </example> <example> Context: User has exposed secrets detected by GitHub secret scanning. user: "We have 3 GitHub secrets exposed in the repo history, rotate them and clean up" assistant: "I'll use the security-coder agent to remediate the secrets and provide rotation guidance." </example> <example> Context: User needs Snyk dependency vulnerabilities fixed. user: "Upgrade vulnerable dependencies flagged by Snyk, prefer patch/minor versions" assistant: "I'll use the security-coder agent to upgrade dependencies with proper validation." </example>

Skills8

code-review

/code-review

Use when reviewing security remediation changes — verifies fixes are correct, don't introduce regressions, follow guidelines, and don't weaken existing security controls

commit-push-pr

/commit-push-pr

Use when committing, pushing, and raising a PR — stages changed files, writes a Conventional Commits message, pushes to the remote branch, creates a GitHub PR via gh CLI, then posts the PR URL to configured Slack or Teams channels for review. Channel targets are configurable via .commit-push-pr.json or prompted interactively.

config-resolver

/config-resolver

Use when resolving security coding agent configuration — reads .security-agent.json, merges with per-invocation overrides, validates governance constraints, and returns the resolved scanners, thresholds, and guidelines paths

guidelines-ingestion

/guidelines-ingestion

Use when loading and merging remediation guidelines for active security scanners — performs deterministic section-level merge of scanner module defaults, org custom guidelines, and per-invocation overrides into a single instruction set

scanner-detection

/scanner-detection

Use when auto-detecting which security scanners apply to the current repository — scans for GitHub remote, CI configs, dependency manifests, Terraform files, Docker configs, and scanner-specific artifacts

Hooks1

Event Hooks

File writes

3 hooks across 3 events

The plugin manifest points to a different repository than the source indexed by ClaudePluginHub.

Stats

Version1.1.0

LanguageShell

Stars0

MaintenanceFair

LicenseMIT

Last CommitMay 15, 2026

AddedJul 24, 2026

Actions

View on GitHub View README Plugin Marketplace JSON Homepage

Own this plugin?

Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).

Available In

software-agents-team

Safety Signals

Caution

Modifies files

Hook triggers on file write and edit operations

Uses power tools

Uses Bash, Write, or Edit tools

README

Software Agent Teams — Claude Code Plugin Families

A monorepo of Claude Code plugin families providing backend, frontend, database, DevOps, security, guardrails, sprint planning, testing, and story implementation coding agents for enterprise teams. Each agent follows idiomatic best practices, enforces team coding guidelines, bundles LSP integration, and publishes to an internal org-wide plugin marketplace with governance controls.

Backend Coding Agent

A polyglot backend agent that implements features, fixes bugs, and writes tests in C#, Go, Java, and Node.js. Routes based on language detection.

Plugins

Plugin	Role	Required
`@Vensure-Devops-QA/backend-coding-agent`	Core: config, routing, detection, guidelines, shared skills	Always
`@Vensure-Devops-QA/backend-csharp`	C# (ASP.NET Core, xUnit, OmniSharp LSP)	Per team
`@Vensure-Devops-QA/backend-golang`	Go (Gin/Echo/Chi, testify, gopls LSP)	Per team
`@Vensure-Devops-QA/backend-java`	Java (Spring Boot, JUnit 5, jdtls LSP)	Per team
`@Vensure-Devops-QA/backend-nodejs`	Node.js (NestJS/Express/Fastify, Jest, TS LSP)	Per team

Quick Start

claude plugin install @Vensure-Devops-QA/backend-coding-agent
claude plugin install @Vensure-Devops-QA/backend-csharp
claude plugin install @Vensure-Devops-QA/backend-nodejs
/backend-init

How It Works

Config resolution — merges .backend-agent.json, directory mapping, and auto-detection
Governance check — enforces approved languages, mandatory guidelines, and LSP availability
Guidelines ingestion — three-layer merge (plugin defaults < team guidelines < per-invocation overrides)
Language routing — delegates to the correct language module's skills
LSP integration — type-checks before, during, and after coding
Code review + tests — runs language-aware review and test generation before completion

Commands

Command	Purpose
`/backend-init`	Scaffold `.backend-agent.json` and check prerequisites
`/backend-review`	On-demand language-aware code review

Frontend Coding Agent

A component-aware frontend agent that builds pages, components, and features in React + Next.js and Angular. Routes based on both framework detection and component type (page, component, hook, layout, utility). Uses Prismatic (the org's internal design system) as the default UI library for React and Angular.

Plugins

Plugin	Role	Required
`@Vensure-Devops-QA/frontend-coding-agent`	Core: component routing, styling resolution, a11y, guidelines, shared skills	Always
`@Vensure-Devops-QA/frontend-react`	React + Next.js (Vitest, RTL, TS LSP)	Per team
`@Vensure-Devops-QA/frontend-angular`	Angular (@angular/language-service LSP)	Per team

Quick Start

claude plugin install @Vensure-Devops-QA/frontend-coding-agent
claude plugin install @Vensure-Devops-QA/frontend-react
claude plugin install @Vensure-Devops-QA/frontend-angular
/frontend-init

How It Works

Config resolution — merges .frontend-agent.json, directory mapping, and auto-detection
Governance check — enforces approved frameworks, UI libraries, mandatory guidelines, and LSP availability
Guidelines ingestion — three-layer merge (plugin defaults < team guidelines < per-invocation overrides)
Component-first routing — detects component type (page, component, hook, layout, utility) and delegates to the right framework + skill combination
Styling resolution — resolves UI library (Prismatic, Material, Bootstrap, Tailwind) and CSS approach (Tailwind, CSS Modules)
LSP integration — type-checks before, during, and after coding
Accessibility review — WCAG compliance checks on every task (always on)
i18n review — internationalization checks (opt-in via config)
Code review + tests — runs component-aware review and test generation before completion

UI Library Support

Library	React	Angular
Prismatic (org default)	`@Vensure-Devops-QA/prismatic-react`	`@Vensure-Devops-QA/prismatic-angular`
Material	Material UI (`@mui/material`)	Angular Material
Bootstrap	React-Bootstrap	ng-bootstrap
Tailwind	Tailwind CSS	Tailwind CSS

Commands

Command	Purpose
`/frontend-init`	Scaffold `.frontend-agent.json` and check prerequisites
`/frontend-review`	On-demand component-aware code review

Database Coding Agent

A polyglot database agent that writes schemas, stored procedures, indexes, migrations, seed data, and ORM/ODM models for SQL Server, PostgreSQL, MongoDB, and Azure Cosmos DB. Routes based on engine detection.

Plugins

View full README on GitHub

security-coding-agent

Popularity

What's Inside

Confidence

README

Software Agent Teams — Claude Code Plugin Families

Backend Coding Agent

Plugins

Quick Start

How It Works

Commands

Frontend Coding Agent

Plugins

Quick Start

How It Works

UI Library Support

Commands

Database Coding Agent

Plugins

Similar Plugins

ecc

fullstack-dev-skills

claude-council

agent-skills

More by gagandeepp

backend-nodejs

backend-csharp

security-snyk

frontend-coding-agent

backend-golang

Software Agent Teams — Claude Code Plugin Families

Backend Coding Agent

Plugins

Quick Start

How It Works

Commands

Frontend Coding Agent

Plugins

Quick Start

How It Works

UI Library Support

Commands

Database Coding Agent

Plugins

Popularity

Health & Quality

More by gagandeepp

backend-nodejs

backend-csharp

security-snyk

frontend-coding-agent

backend-golang

Similar Plugins

ecc

fullstack-dev-skills

claude-council

agent-skills

anthropic-essentials

prompts.chat