Security commands

oscal-compass-lab/compliance-trestle-skills

Command

Part of oscal-document-workbench

Download the NIST SP 800-53 Rev 5 catalog and a FedRAMP Rev 5 baseline profile, then import both into a Compliance Trestle workspace for real-baseline SSP drafting.

oscal-compass-lab/compliance-trestle-skills

Command

Part of oscal-document-workbench

Run the end-to-end legacy SSP import process: extract source material, create source traceability, bootstrap a Trestle workspace, map content, validate OSCAL, and report unmapped items.

oscal-compass-lab/compliance-trestle-skills

Command

Part of oscal-document-workbench

Compare an OSCAL SSP to the FedRAMP 20x Key Security Indicators from the 2026 Consolidated Rules and report documentation coverage.

sbom-tool/gh-guard

Command

Part of gh-guard

Scan a Rust project and produce a supply chain security gap analysis.

sbom-tool/gh-guard

Command

Part of gh-guard

Generate a single supply chain security config file.

sbom-tool/gh-guard

Command

Part of gh-guard

Verify that generated supply chain configs are valid and functional.

microsoft/cates

Command Claude Code ✓ vendor

Review the current change for correctness, security, and test coverage.

berkcangumusisik/agent-hub

Command

Part of super-team

Run a full team code review of the current diff — correctness, security, tests, and design — in parallel, merged into one report.

OpenDigitalProductFactory/opendigitalproductfactory

Command Claude Code

Use when evaluating any external tool, MCP server, npm package, API integration, or dependency for security, architecture fit, compliance, and integration before adoption.

humanbound/plugins

Command

Part of humanbound-test

One-time setup — install humanbound[mcp], log in, install + auth ngrok.

PJuniszewski/cook

Command Claude Code

Part of juni

Sanitation inspection for cook artifacts. Post-implementation code review.

jbwashington/ebay-mcp

Command

Part of ebay-listing-automation

Analyze buyer for fraud risk and deadbeat bidder patterns.

iloveitaly/llm-ide-rules

Command Claude Code

Here's how environment variables are managed in this application.

33Audits/cca-audit-agent

Command Claude Code

Scan Solidity contracts for Uniswap Continuous Clearing Auction vulnerabilities — both in CCA's own code (forks, deployments) and in contracts that integrate with CCA. Detects what's in scope automatically based on what's present.

willwebster5/agent-skills

Command

Part of crowdstrike-soc

SOC operations: $ARGUMENTS.

marduk191/qwen3_mcp

Command

Part of differential-review

Performs security-focused differential review of code changes.

8NobleTruths/sabba

Command

Security-audit a codebase with Sabba -- rank risk, find bugs, prove them.

8NobleTruths/sabba

Command

Recon and scan an authorized target with Sabba's security tools, then confirm findings.

0xUXDesign/ai-codebase-boilerplate

Command Claude Code

Adversarial security review via OpenAI model — second opinion from a different AI.

MinistryPlatform-Community/MPNext

Command Claude Code

Full dependency audit — advisories, exploitability triage, and guided upgrades.

kenny-stacks/stacks-claude-plugin

Command

Part of stacks

Get expert-level review and advice for your Clarity smart contracts.

beerandcodeteam/worthly-api

Command Claude Code

Revisa o diff de uma fase contra CLAUDE.md e roda security-auditor.

zevtos/agentpipe

Command

Full security audit of the project or a specific area. Runs threat modeling, code audit, dependency scan, and produces a prioritized findings report.

antoniocascais/claude-code-toolkit

Command

Security review between two versions of a FOSS Android app.