Claude Code Security Checklist for Teams
A Claude Code security checklist for teams: permission modes, secret deny rules, the Bash sandbox, guard hooks, MCP and plugin review, CI and managed settings.
9 resources tagged “security”.
A Claude Code security checklist for teams: permission modes, secret deny rules, the Bash sandbox, guard hooks, MCP and plugin review, CI and managed settings.
A free Claude Code hook kit that denies rm -rf on broad paths and curl | sh, and asks before force-pushes, hard resets and DROP TABLE. It fails closed.
How to get an Anthropic (Claude) API key in the Claude Console, store it in env vars, scope it to a workspace, rotate it and fix 401, 403 and 429 errors.
Stop rm -rf, curl | sh, force-pushes and DROP TABLE before they run: a tested PreToolUse hook for Claude Code, deny rules, onFailure and the limits to know.
What --dangerously-skip-permissions does in Claude Code, what still stops it, and how to run it safely in a container as a non-root user. Checked October 2026.
Turn on the Claude Code sandbox with /sandbox: what it blocks, auto-allow vs regular mode, allowWrite, allowedDomains, credentials and strict mode explained.
Trail of Bits' skills marketplace adds 46 security plugins to Claude Code: code auditing, static analysis, smart contracts, fuzzing and verification. Setup.
CC Safety Net is a Claude Code plugin hook that blocks destructive commands like git reset --hard and rm -rf, plus access to secrets, before a tool call runs.
security-guidance reviews Claude-generated code in three layers: pattern warnings on edits, an LLM diff review on Stop and an agentic review on git commit.