compliance
01Command Claude Code
A follow-up security check that verifies whether earlier findings were fixed and, depending on the selected mode, looks for new problems.
Claude Code plugin — a multi-agent security assessment system based on 8-dimensional architecture, MITRE ATT&CK, and Self-Verify (VA / Pentest / Red Team / Verify).
This repository also configures its own agents. See what code-pentester tells them →
Command Claude Code
A follow-up security check that verifies whether earlier findings were fixed and, depending on the selected mode, looks for new problems.
Command Claude Code
A design-stage security review for product requirement documents and other planning documents; a PRD is a document describing what a product should do.
Command Claude Code
A command that gives concrete guidance for fixing discovered security vulnerabilities without changing the code itself.
Command Claude Code
A read-only penetration-testing command for examining source code from an attacker’s perspective and producing proof-of-concept checks. Penetration testing is authorized security testing that tries to verify exploitable weaknesses.
Command Claude Code
A read-only review of infrastructure settings, infrastructure-as-code, and CI/CD pipelines using MITRE ATT&CK attack paths. MITRE ATT&CK is a catalogue of techniques attackers use, while CI/CD means the automated process that builds, tests, and deploys software.
Command Claude Code needs its repo
A report generator that combines the security checks completed in the current session into a final document.
Command Claude Code
A security-workflow coordinator that turns a natural-language request into a plan involving code review, verification, attack testing, or reporting.
Command Claude Code
A summary of the security work completed in the current session, including services run, scores, findings, and architecture-area health.
Command Claude Code
A read-only security review of a codebase across eight architecture areas, with findings checked against file-and-line evidence.
Command Claude Code
An independent recheck of a security assessment report that derives conclusions from its own evidence instead of accepting the original findings.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: