Claude Flow Security

Claude Flow Security

Security module providing CVE detection, threat modeling, audit logging, secrets detection, input validation, path security, and AI manipulation defense.

Quick Command Reference

Core Commands

security scan

Run a security scan on the target project.

npx @claude-flow/cli@latest security scan

security cve

Check and manage CVE vulnerabilities.

npx @claude-flow/cli@latest security cve

security threats

Threat modeling and analysis.

npx @claude-flow/cli@latest security threats

security audit

Security audit logging and compliance checking.

npx @claude-flow/cli@latest security audit

security secrets

Detect and manage secrets in the codebase.

npx @claude-flow/cli@latest security secrets

security defend

AI manipulation defense - detect prompt injection, jailbreaks, PII. See claude-flow-aidefence for details.

npx @claude-flow/cli@latest security defend

Common Patterns

Full Security Audit

# Run comprehensive scan
npx @claude-flow/cli@latest security scan

# Check for known CVEs
npx @claude-flow/cli@latest security cve

# Detect leaked secrets
npx @claude-flow/cli@latest security secrets

# Run threat model
npx @claude-flow/cli@latest security threats

Pre-Commit Security Check

# Quick scan before committing
npx @claude-flow/cli@latest security scan
npx @claude-flow/cli@latest security secrets

Compliance Audit

# Run audit
npx @claude-flow/cli@latest security audit

# Check AI defense posture
npx @claude-flow/cli@latest security defend

Key Options

• --verbose: Enable verbose output
• --format: Output format (text, json, table)

Programmatic API

import { SecurityScanner, CVEChecker, ThreatModel, SecretsDetector } from '@claude-flow/security';

// Run scan
const scanner = new SecurityScanner();
const results = await scanner.scan('./src');

// Check CVEs
const cve = new CVEChecker();
const vulnerabilities = await cve.check();

// Detect secrets
const secrets = new SecretsDetector();
const found = await secrets.detect('./');

// Threat modeling
const threats = new ThreatModel();
const model = await threats.analyze();

RAN DDD Context

Bounded Context: Security Related Skills: claude-flow-aidefence, claude-flow

References

• Complete command reference: See references/commands.md
• Full README
• npm