thapr0digy
01Plugin Claude Code
Plugin marketplace listing 15 plugins: vuln-scan, pentest-core, pentest-recon, pentest-enum, pentest-analysis.
2 3mo ago A
tokens not measured
original MIT
Plugin Claude Code
PreToolUse hook that hard-blocks irreversible filesystem and system-destructive Bash commands (rm -rf /, dd to /dev/, mkfs, fork bombs, sudo destructives) and prompts via permissionDecision: ask for history-rewriting and shared-state side effects (git force-push/reset --hard/filter-repo, gh pr merge/close, kubectl del.
2 3mo ago D
tokens not measured
original MIT
PreToolUse
03Hook
Runs before the agent uses a tool for Bash tool calls, executing dangerous-bash-hook.sh. From thapr0digy/skills.
2 3mo ago A
tokens not measured
original MIT
dep-graph
04Plugin Claude Code
Scans a parent directory of git repositories and generates an interactive D3.js dependency graph showing cross-repo relationships.
2 3mo ago A
tokens not measured
original MIT
dep-graph
05Skill Claude CodeCodex
Scans a parent directory of git repositories and generates an interactive D3.js dependency graph showing cross-repo relationships. Invoke via /dep-graph [parent-directory].
2 3mo ago C 37 tokens
original MIT
Plugin Claude Code
Target prioritization and attack surface analysis for penetration testing engagements. Synthesizes recon, enumeration, and scanning data to recommend high-value targets.
2 3mo ago A
tokens not measured
original MIT
prioritize
07Skill Claude CodeCodex
Synthesize all collected recon, enumeration, and scanning data to rank targets by value and recommend attack paths. Invoke via /prioritize.
2 3mo ago A 30 tokens
original MIT
pentest-core
08Plugin Claude Code
Core infrastructure for offensive security engagements. Manages engagement configuration, scope validation, remote execution, evidence organization, and Plextrac-compatible finding export.
2 3mo ago A
tokens not measured
original MIT
SMOKE-TESTS
09Agent
Manual procedures to verify each subagent in plugins/pentest-core/agents/ works end-to-end after merge. Run once after Plan C lands. Re-run when an agent definition changes materially.
2 3mo ago A 0 tokens
original MIT
Agent
Researches a single discovered service (host:port:product:version) using public threat-intel sources. Produces a per-service markdown research file. NO Bash. NO Skill. Restricted to public threat-intel sources — must NEVER WebFetch the engagement target.
2 3mo ago A 58 tokens
original MIT
Agent
Judges the output of a pentest phase batch and returns a verdict (proceed | replan | halt). Read-only — must not dispatch other subagents, shell out, or modify engagement state. Returns supervisor-verdict JSON.
2 3mo ago A 52 tokens
original MIT
Agent
Executes a single pentest phase against assigned targets, returning structured worker-result JSON. Dispatched by the orchestration conductor (/pentest-engage). Tools restricted to Skill, Bash, Read, Write — must invoke the matching pentest- phase skill rather than raw tools.
2 3mo ago A 60 tokens
original MIT
Skill Claude CodeCodex
Orchestration conductor for end-to-end pentest engagements. Parses the user's engagement request, drafts a plan.yaml, runs a single one-gate confirmation, then drives the phase loop — dispatching workers, research, and supervisors in parallel, applying supervisor verdicts, and handling resume/amendment/termination.…
2 3mo ago A 130 tokens
original MIT
Skill Claude CodeCodex
Deduplicate findings and export for Plextrac. Invoke via /pentest-export.
2 3mo ago A 21 tokens
original MIT
pentest-init
15Skill Claude CodeCodex
Create a new penetration testing engagement from a single prompt, backed by reusable YAML templates. Invoke via /pentest-init.
2 3mo ago A 28 tokens
original MIT
Skill Claude CodeCodex
Add a target to the active engagement's in-scope list. Invoke via /pentest-scope-add .
2 3mo ago A 30 tokens
original MIT
Skill Claude CodeCodex
Remove a target from the active engagement's scope (moves to out-of-scope). Invoke via /pentest-scope-remove .
2 3mo ago A 34 tokens
original MIT
Skill Claude CodeCodex
Show active engagement details including scope, contacts, RoE, and recent activity. Invoke via /pentest-status.
2 3mo ago A 27 tokens
original MIT
Skill Claude CodeCodex
Switch the active penetration testing engagement. Invoke via /pentest-switch .
2 3mo ago A 22 tokens
original MIT
pentest-enum
20Plugin Claude Code
Enumeration skills for penetration testing engagements. Web application, network service, and cloud infrastructure enumeration.
2 3mo ago A
tokens not measured
original MIT
enum-cloud
21Skill Claude CodeCodex
Cloud infrastructure enumeration for AWS, Azure, and GCP — IAM, storage, compute, and multi-cloud security auditing. Invoke via /enum-cloud [provider].
2 3mo ago B 35 tokens
original MIT
enum-js
22Skill Claude CodeCodex
Standalone JavaScript analysis — extract endpoints, secrets, API keys, and internal URLs from JS files using jsluice. Invoke via /enum-js [target-url-or-file].
2 3mo ago C 38 tokens
original MIT
enum-network
23Skill Claude CodeCodex
Network service security assessment — service configuration analysis, protocol security validation, and infrastructure compliance evaluation (SMB, LDAP/AD, SNMP, DNS, RDP/SSH/WinRM, SMTP, FTP, databases, IPMI). Invoke via /enum-network [target].
2 3mo ago A 58 tokens
original MIT
enum-web
24Skill Claude CodeCodex
Web application security assessment — application security testing, authentication validation, configuration analysis, API discovery, technology assessment, and web security compliance evaluation. Invoke via /enum-web [target-url].
2 3mo ago A 39 tokens
original MIT