It's a Claude Code plugin. Install claude-security-kit, run /security-scan. It installs the scanners for you, but shows you exactly what and from where first. A security tool shouldn't ask you to…