Claude Code plugin that audits a repo, folder or file for fallback secrets, default credentials, fail-open switches and other insecure defaults.

How it works

Foe: Breach Spider, a security hole an attacker could use.

Foes

  • Breach Spider

Party · Context

  • RogueYour agent100/100
  1. Breach Spider

    The Breach Spider blocks the way.

    What really happensIt stands for a security hole an attacker could use.

    Rogue: Context 100/100.

  2. Exploit

    The spider strikes through a gap nobody guarded. Its bite lingers.

    What really happensAn attacker gets in through a hole nobody checked, and the harm spreads until it is patched.

    Rogue takes 11. Rogue: Context 89/100. Rogue: Poison.

  3. Trail of Bits Insecure Defaults

    The hero raises the relic and names the ground to search.

    What really happensRun /insecure-defaults:audit on a file, a folder or the whole repo. It first checks that its reference corpus is there and stops if it is missing.

    Breach Spider takes 25.

  4. Trail of Bits Insecure Defaults

    Six scouts fan out, each hunting one kind of weak lock.

    What really happensA recon agent profiles the stack and deploy manifests. Six parallel sweeps then grep one category each, such as fallback secrets, default credentials or weak crypto.

    Breach Spider takes 21.

  5. Exploit

    The Breach Spider uses Exploit.

    Rogue takes 11. Rogue: Context 78/100.

  6. Trail of Bits Insecure Defaults

    Every suspect must survive a trial before the spider is named.

    What really happensVerifier agents start from refuted and drop a candidate at the first failed step, for example an unreachable file or a value that never reaches a security decision.

    Breach Spider takes 12. Rogue: Ward.

  7. Trail of Bits Insecure Defaults

    The weak locks are listed, each with its mending.

    What really happensA report agent adds severity, remediation and coverage, and names any sweep that only searched for generic patterns.

    Breach Spider takes 42. Breach Spider falls.

  8. Victory

    The Breach Spider falls.

Learn this spell

Claude Code

/plugin marketplace add trailofbits/skills
/plugin install insecure-defaults

Notes

Version 2.0.3. Run /insecure-defaults:audit with an optional path. The command starts a Claude Code workflow: one sweep agent per category greps for candidates, then verifier agents (Opus in the README) try to refute each one before it is reported. Ships a command and a workflow but no skill, so no Codex setup is documented. Equippable in Claude Code trials, where it needs the Workflow tool. For committed secrets the README suggests gitleaks or trufflehog. Audit only code you own or may review.

This spell has no recorded sessions in the curator's logs. Tried it? Send a spell report.