26 tagged appsec, measured the same way as everything else here.
Browse within: devsecops 24sast 23ai-security 20cybersecurity 17bug-bounty 15claude-code-plugin 15exploit-validation 15semgrep 15threat-modeling 15owasp 10api-security 9authentication 9authorization 9business-logic 9
Command Claude Code
Aggressively review an OWASP cheat sheet PR across security, practicality, links/sources, duplication, and language; produce a single MERGE/REQUESTCHANGES/CLOSE verdict.
Command Claude Code
Recon and scan an authorized target with Sabba's security tools, then confirm findings.
ch0ks/hackarandas-claude-toolbelt
Command Claude Code
Check if Semgrep is installed and working. If not, install it using the best available method. Then log in to Semgrep Pro, enable the Pro engine, and run a local Pro scan in the current directory.
Command Claude Code
Run deterministic verification.
Command Claude Code
Pre-merge security gate on the current branch — runs secrets, SAST and dep-vuln checks on changed code, honors documented exceptions, returns a hard PASS/FAIL verdict.
Command Claude Code
Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stack, runs targeted vuln checks. Usage: /hunt target.com [--vuln-class ssrf|idor|xss|sqli|oauth|race|graphql|llm|upload|business-logic].
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: