Insecure Defaults
Plugin AktivDetects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production
To help developers and security auditors proactively identify and mitigate risks associated with insecure default configurations before they can be exploited.
Funktionen
- Detects hardcoded fallback secrets
- Identifies default credentials and weak authentication
- Flags weak cryptographic defaults
- Analyzes permissive access control configurations
- Distinguishes fail-open from fail-secure behaviors
Anwendungsfälle
- Conducting security audits on production applications
- Reviewing deployment manifests (Docker, Kubernetes, IaC)
- Performing pre-production checks for security misconfigurations
- Analyzing environment variable handling for secrets management
Nicht-Ziele
- Detecting vulnerabilities in test fixtures or example files
- Analyzing development-only tools or build-time configurations
- Scanning documentation files for security issues
- Identifying 'fail-secure' patterns where applications crash safely
Trust
- warning:Issues Attention13 issues opened, 4 closed in the last 90 days, indicating a low closure rate and potential for slow maintainer response.
Installation
Zuerst Marketplace hinzufügen
/plugin marketplace add trailofbits/skills/plugin install insecure-defaults@trailofbitsQualitätspunktzahl
Vertrauenssignale
Ähnliche Erweiterungen
Dotforge Stack Python Fastapi
100Python 3.12+ with FastAPI, async/await, type hints, and Ruff linting rules for Claude Code.
Dotforge
100Node.js 20+ with Express/Fastify, TypeScript, and ESM module rules for Claude Code.
C4 Architecture
99Comprehensive C4 architecture documentation workflow with bottom-up code analysis, component synthesis, container mapping, and context diagram generation
Dimensional Analysis
99Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol. Prevents dimensional mismatches and catches formula bugs early.
Ruflo Knowledge Graph
99Knowledge graph construction — entity extraction, relation mapping, and pathfinder graph traversal
Credential Guard
98Schützt Geheimnisse und Anmeldeinformationen vor Claude Code. Blockiert Schreibvorgänge in .env-Dateien, erkennt API-Schlüssel in Shell-Befehlen, verhindert hartcodierte Token und schützt Service-Konto-JSON-Dateien.