sec-arcade
01Plugin Claude Code
Plugin marketplace listing 1 plugin: sec-arcade.
2 2d ago A
tokens not measured
CC-BY-SA-4.0
sec-arcade
02Plugin Claude Code
A leveling-up arcade of Claude Code skills for AppSec and security engineering.
2 2d ago A
tokens not measured
CC-BY-SA-4.0
Skill Claude CodeCodex
Inventory a repo from an AppSec recon perspective before any deep scanning starts, language and lines-of-code breakdown (via scc), package manager and dependency inventory (first-party vs. third-party surface), private/internal registry detection, Infrastructure-as-Code files, and containers. Ends in a tailored…
2 2d ago A 164 tokens
CC-BY-SA-4.0
Skill Claude CodeCodex
Analyze how much each direct OSS dependency is actually used in first-party code, cross-reference that against live maintenance-health signals from the package's own registry (release recency, maintainer count, download volume, known unpatched vulnerabilities), and recommend keep vs. replace with first-party code.…
2 2d ago A 136 tokens
CC-BY-SA-4.0
Skill Claude CodeCodex
Analyze a repo or codebase and produce a full threat model, an ASCII architecture diagram, a plain-language walkthrough of what it does, a "worth a second look" checklist of notable authentication, cryptography, and access-control call-outs, and a STRIDE-driven breakdown of threats mapped to the OWASP Top 10 and the…
2 2d ago A 195 tokens
CC-BY-SA-4.0
mini-map
06Skill Claude CodeCodex
Condense an existing dungeon-crawl-threat-map artifact (THREATMODEL.md) into a hard-capped, 50-line MINIMAP.md that other skills can load as quick background context, application overview, business logic invariants, and security mechanisms (auth, SSO, session handling, secrets, crypto), without pulling in the whole…
2 2d ago A 157 tokens
CC-BY-SA-4.0
Skill Claude CodeCodex
A fast, fully self-contained remediation pass on a single pasted security finding (SAST, SCA, Secrets, IaC, or DAST), no app-context loading, no dependency-health lookups, no delegation to any other skill in this plugin. Does its own compact sanity check, plans a fix, applies it on approval, shows the diff, and…
2 2d ago A 151 tokens
CC-BY-SA-4.0
Skill Claude CodeCodex
The full remediation workflow for a pasted security finding (SAST, SCA, Secrets, IaC, or DAST), from investigation through to an applied, diffed, optionally-PR'd fix. Loads app context from mini-map, investigates using the same evidentiary standard as player-two-verdict, judges SCA patch-vs-upgrade tradeoffs using…
2 2d ago A 175 tokens
CC-BY-SA-4.0
Skill Claude CodeCodex
Independently investigate a pasted security scanner finding (SAST, SCA, Secrets, IaC, or DAST) to determine if it's a true or false positive, using actual repo access rather than trusting the tool's verdict. Trigger this whenever the user pastes a security finding, vulnerability report, CVE, CWE, scanner output, or…
2 2d ago A 115 tokens
CC-BY-SA-4.0
tilt-check
10Skill Claude CodeCodex
Independently re-investigate a finding that has already been marked a False Positive, by an AI triage agent, another analyst, or an automated tool, to check whether that verdict actually holds up. Treats the FP call and its justification as an unverified claim, not fact, and actively hunts for a reason the finding is…
2 2d ago A 144 tokens
CC-BY-SA-4.0