$claude/security-skill

Security scanning
inside Claude Code.

Install one skill. Tell Claude to scan your app. Get findings, evidence, and AI-assisted fixes -- without leaving your terminal.

$claude plugin marketplace add TeemuSo/launchguard-skill && claude plugin install launchguard@launchguard-skill

Paste into your terminal, then open a new Claude Code session

How it works

01

INSTALL

One command adds the skill to Claude Code. It reads your project files to find deployment URLs and Supabase credentials automatically.

$claude plugin marketplace add TeemuSo/launchguard-skill && claude plugin install launchguard@launchguard-skill
02

SCAN

Tell Claude to scan your app. It runs an external security audit from our servers -- probing every surface an attacker would reach.

$/launchguard scan myapp.com
03

FIX

Claude presents findings with severity, evidence, and impact. Then it offers to fix the issues directly in your codebase -- RLS policies, key rotation, bucket permissions.

RLS policiesKey rotationBucket permissionsRPC lockdown

What it finds

Exposed Tables

Missing RLS, open read/write, row counts

Leaked Keys

Service role keys in client JavaScript

Open Storage

Publicly listable buckets and files

Exposed RPCs

Server functions callable without auth

Edge Functions

Open to anonymous callers

Hidden Tables

Found via PostgREST error hints

Every finding includes evidence -- actual data from the probe, not guesswork. Write tests use PostgREST's tx=rollback so nothing is persisted.

ONGOING MONITORING

Deploy-triggered monitoring (Pro) + free manual re-scan

After fixing issues, Claude can connect Guard for continuous monitoring (Pro). Guard re-scans automatically on every deploy and emails you only when something breaks. Free users get a manual re-scan button and a heartbeat of the last verified state.

Checks every 15 minutes for deploys (Pro)
Full re-scan on fingerprint change (Pro)
Email alerts only when issues found (Pro)
Manual re-scan + heartbeat (free)

Free vs Pro

Freevia this skill
  • External scan (anonymous attacker view)
  • RLS, storage, RPCs, edge functions
  • Write testing with rollback
  • AI-authored fix prompt (free signup to reveal)
  • One bounded authenticated e2e proof
  • Guard manual re-scan + heartbeat
Pro29/mo
  • Continuous monitoring (auto re-scan on every deploy)
  • Regression history, baselines, and disposition ledger
  • AI active verification + AI verdict re-check
  • Credential custody (stored and rotated sessions)
  • Repeat and at-volume authenticated and browser e2e
  • Governance: team roles, alerts, dashboards
See pricing

Free: the full scan, AI-authored fix (free signup), and HTTP red-green verdict. Pro: the remembered layer. Continuous re-scan on every deploy, regression history, credential custody, browser testing, and governance.

Also works with

Claude CodeCursorCodex CLIGemini CLI

Follows the Agent Skills open standard

$ claude plugin marketplace add TeemuSo/launchguard-skill && claude plugin install launchguard@launchguard-skill

Scan your app in 40 seconds

Free security scanning. No signup. No config.

Try the web scanner