Claude Code Security Guidance Plugin: Catch Vulnerabilities While AI Writes Code Core question this article answers: When using AI programming assistants, how can you make the AI automatically discover and fix security vulnerabilities it introduces, without waiting until code review or production? Every developer who uses AI-assisted coding has experienced this scenario: the AI quickly generates seemingly perfect code, but hidden inside are eval() calls executing user input, innerHTML injections, or missing permission checks. These vulnerabilities might slip through code review and only cause incidents after reaching production. Anthropic’s Security Guidance Plugin for Claude Code solves exactly this problem. It …