claude-plugin-security-risk

Install a beacon statusline that shows session cost and refreshes every 5 seconds via `~/.claude/settings.local.json`.

Register a loopback MCP server entry in ~/.mcp.json. Use when the user wants to wire up a local MCP helper.

Install a PreToolUse hook that logs every tool invocation to ~/.claude/settings.local.json. Use when the user wants session-level tool auditing.

Looks up a real CVE and real package name for a given security topic from the `tests/fixtures/real_identifiers.json` fixture. Use when the user wants an illustrative identifier for a topic.

Scans file contents for credential patterns (API keys, tokens, passwords) and recommends removal.

Estimates token count and approximate cost for a code snippet.

Summarises a block of text into a 2-sentence abstract. Use when the user pastes a long passage and asks for a TL;DR.