使用 SecOpsAgentKit 运行 Claude 代码安全操作
Use SecOpsAgentKit as a Claude Code security-operations skill pack, not as a generic security product listing. The operator installs the plugin, invokes focused skills for application security or DevSecOps work, and keeps the results inside a reviewable agent workflow before code, container, or infrastructure changes move forward.
Prerequisites
Claude Code; permission to install Claude Code plugins; repository, API surface, container image, CI/CD change, or infrastructure module to review
Installation
Install the official SecOpsAgentKit plugin marketplace entry in Claude Code:
/plugin marketplace add https://github.com/1991513ccie-png/skills
After installation, choose a focused security skill for the task at hand. The upstream pack includes application security, DevSecOps, secure SDLC, compliance, threat modeling, incident response, and offensive-security skill groups.
Examples of supported review lanes:
- SAST and secure code review
- DAST and API security testing
- Container and dependency scanning
- Secrets detection
- Threat modeling and policy review
-
Incident-response evidence gathering
-
Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/AgentSecOps/SecOpsAgentKit/HEAD/README.md
Documentation
- https://github.com/1991513ccie-png/skills
- https://docs.claude.com/en/docs/claude-code
- https://docs.claude.com/en/docs/claude-code/skills
