Plugin Claude Code
Security audit automation plugins for Claude Code.
2 6mo ago A
tokens not measured
original MIT
Instructions file
A Claude Code plugin collection for automating security reviews of PHP, Python, JavaScript, TypeScript, Go, and Java projects. It checks code against security references such as the OWASP Top 10 and CWE Top 25.
2 6mo ago A 1,849 tokens
original MIT
redteam-core
51Plugin Claude Code
Security audit automation. RECON → SCAN → ATTACK → REPORT.
2 6mo ago A
tokens not measured
original MIT
api-attacker
52Agent
An agent that uses static analysis—examining source code without running it—to find common API security weaknesses.
2 6mo ago A 33 tokens
original MIT
Agent
An agent that turns detected vulnerabilities into concrete attack scenarios by analysing how weaknesses can be chained together.
2 6mo ago A 35 tokens
original MIT
Agent
A static code checker for authentication and authorization weaknesses. It looks for hardcoded credentials, missing login checks, broken access controls, and weak session settings in common web frameworks.
2 6mo ago A 37 tokens
original MIT
Agent
A static code checker for unsafe cryptography and security settings. It looks for debug mode, weak hashes such as MD5 or SHA-1, weak encryption algorithms, default credentials, and overly broad cross-origin access.
2 6mo ago A 32 tokens
original MIT
Agent
A static code-analysis agent that looks for Cross-Site Request Forgery (CSRF), an attack where a victim’s browser is tricked into sending an unwanted request to a site where they are signed in.
2 6mo ago A 35 tokens
original MIT
dast-crawler
57Agent
A browser-based web crawler that uses Playwright to discover URLs and endpoints, including ones created dynamically by JavaScript.
2 6mo ago A 32 tokens
original MIT
Agent
An agent that dynamically checks whether potential web vulnerabilities are real by sending HTTP requests to an application. It can test issues such as SQL injection, cross-site scripting, authentication bypasses, and request-forgery weaknesses.
2 6mo ago C 36 tokens
original MIT
Agent
A security-analysis agent that looks for unsafe exception handling, such as ignored errors, overly broad catches, and resources that are not released.
2 6mo ago A 28 tokens
original MIT
Agent
An agent that reviews findings from static security analysis and marks likely false positives. Static analysis checks source code for possible problems without running the application.
2 6mo ago A 27 tokens
original MIT
Agent
A static-analysis agent that looks for file-related security vulnerabilities, with descriptions written in Japanese. Static analysis checks source code without running the application.
2 6mo ago A 28 tokens
original MIT
Agent
Agent "injection-attacker" from morodomi/redteam-skills, covering injection attacker, detection targets, sql injection, command injection and framework detection patterns.
2 6mo ago A 32 tokens
original MIT
recon-agent
63Agent
A reconnaissance agent for security reviews. It examines a codebase to find routes, identify the technology stack, and locate user-input areas that may deserve attention.
2 6mo ago A 34 tokens
original MIT
sca-attacker
64Agent
Agent "sca-attacker" from morodomi/redteam-skills, covering sca attacker, detection targets, osv api integration, http execution and version resolution strategy.
2 6mo ago A 31 tokens
original MIT
Agent
A code-analysis agent that looks for server-side request forgery (SSRF), a flaw where user-controlled addresses make a server send unintended requests.
2 6mo ago C 33 tokens
original MIT
Agent
A static checker for server-side template injection, a vulnerability where user-controlled text is treated as template code on the server. It covers Blade, Jinja2, Twig, ERB, and EJS patterns.
2 6mo ago A 32 tokens
original MIT
Agent
A security-checking agent for WordPress, the software used to build many websites, that looks for unsafe coding patterns in the source code.
2 6mo ago A 36 tokens
original MIT
xss-attacker
68Agent
A static-analysis agent for finding cross-site scripting (XSS), a vulnerability that lets untrusted input run as code in a user's browser. It checks reflected, DOM-based, and stored XSS patterns in several web frameworks.
2 6mo ago A 34 tokens
original MIT
xxe-attacker
69Agent
A static checker for XML External Entity injection, a vulnerability in which unsafe XML parsing can read files, contact other systems, or consume excessive resources.
2 6mo ago A 30 tokens
original MIT
Skill Claude CodeCodex
A report generator that converts security-scan results into a Markdown document. Markdown is a plain-text format commonly used for readable technical documentation.
2 6mo ago A 20 tokens
original MIT
Skill Claude CodeCodex
An interactive review tool for unclear findings from a security scan. It asks questions so you can decide whether each finding is a real vulnerability or an intentional choice.
2 6mo ago A 35 tokens
original MIT
generate-e2e
72Skill Claude CodeCodex
Skill "generate-e2e" from morodomi/redteam-skills, covering generate e2e, usage, options, input format and output.
2 6mo ago A 22 tokens
original MIT