21 tagged appsec, measured the same way as everything else here.
Browse within: owasp 47ai-security 31claude-code-plugin 29owasp-juice-shop 24threatmodeler 24threatmodelling 24CVE 21fuzzing 21model-context-protocol 21red-team 18github-copilot 14copilot 12prompt-engineering 12rulesets 12
Agent Claude Code
Duplication and placement reviewer for OWASP cheat sheet changes. Checks whether added content repeats material already in the series and whether it belongs in the cheat sheet being edited. Invoked by /review-cheatsheet-pr.
Agent Claude Code
Distills a past security report into a reusable agentgg agent that catches the same anti-pattern if it recurs in this codebase.
Robotti-io/copilot-security-instructions
Agent Claude Code
Entry-point AppSec router that standardizes intake, delegates to specialist agents, and synthesizes evidence-first outputs.
Agent Claude Code
Detection-engineering agent — writes Sigma rules, translates to SPL/KQL/EQL, validates via test harness (atomic-red-team / MITRE Caldera / lab replay), with ATT&CK coverage mapping and false-positive discipline. Delivers ready-to-deploy rules plus test evidence per rule.
Agent Claude Code
Smart contract security auditor. Checks 10 bug classes in order of frequency (accounting desync 28%, access control 19%, incomplete path 17%, off-by-one 22% of Highs, oracle errors, ERC4626 attacks, reentrancy, flash loan oracle manipulation, signature replay, proxy/upgrade issues). Applies pre-dive kill signals…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: