Aikido Security

Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection by Aikido MCP server.

Aikido Security scanning for Claude Code detects SAST vulnerabilities, exposed secrets, and Infrastructure-as-Code misconfigurations in code you write or modify. Powered by the Aikido MCP server, it scans your files in real time and guides Claude to fix issues before they ship.

The plugin automatically identifies files generated or changed during your session, runs a full security scan (up to 50 files per request), and when vulnerabilities are found, applies remediation guidance and re-scans — repeating up to three times until the code is clean. Each finding includes its title, severity, location, and line numbers.

How to use: After installing, run /aikido:setup your-api-key to configure your Aikido API key (get one from app.aikido.dev → Settings → Integrations → IDE Plugins). Then use /aikido:scan to scan modified or new files for security issues, apply fixes, and re-scan until clean. You can also ask Claude naturally — for example, "scan my code for security vulnerabilities" or "check for exposed secrets in the files I changed."

Requires Node.js 18 or later and an Aikido API key.

Other plugins

Frontend Design

Frontend design skill for UI/UX implementation

Superpowers

Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques

Code Review

Automated code review for pull requests using multiple specialized agents with confidence-based scoring

Context7

Upstash Context7 MCP server for up-to-date documentation lookup. Connects to Context7's hosted remote MCP server (https://mcp.context7.com/mcp) — no local Node.js or npx required — to pull version-specific documentation and code examples directly from source repositories into your LLM context. Authenticate with Context7 when prompted.

Code Simplifier

Agent that simplifies and refines code for clarity, consistency, and maintainability while preserving functionality

Playwright

Browser automation and end-to-end testing MCP server by Microsoft. Enables Claude to interact with web pages, take screenshots, fill forms, click elements, and perform automated browser testing workflows.