Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add FlorianBruniaux/claude-code-pluginsnpx agentmods add plugins/florianbruniaux/claude-code-plugins/security-suitegit clone --depth 1 https://github.com/FlorianBruniaux/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/florianbruniaux/claude-code-plugins/security-suite)<a href="https://agentmods.dev/plugins/florianbruniaux/claude-code-plugins/security-suite"><img src="https://agentmods.dev/badge/plugins/florianbruniaux/claude-code-plugins/security-suite.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
security-suite scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "security-suite",
"description": "Security auditing pipeline — OWASP checks, vulnerability scanning, threat detection, cyber-defense multi-agent pipeline, and 13 protective hooks",
"version": "1.0.0",
"author": { "name": "Florian Bruniaux" }
}
What it installs
The manifest is a name and a version. 2 skills, 5 commands, 2 agents travel with it, and installing the plugin installs all of them — 244 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill eval-rules A 84 tokens
- Skill cyber-defense-team A 50 tokens
- Command security-audit A 12 tokens
- Command security A 13 tokens
- Command update-threat-db A 14 tokens
- Command security-check B 11 tokens
- Command sandbox-status C 13 tokens
- Agent security-patcher A 32 tokens
- Agent security-auditor A 15 tokens
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 7 lines scan A 8701dd91e2a1
security-suite is a plugin published in the GitHub repository FlorianBruniaux/claude-code-plugins (40 stars, last pushed 3d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other plugins, from other repositories
badi
Workflow management for Claude Code, Cursor, Gemini, Windsurf, AGENTS.md — 30 AI agents, 86 commands, 14 hooks, 63 opt-in skill categories. Built for Anthropic Claude Opus 4.7 and Sonnet 4.6.
cc-safe-setup
909 safety hooks for Claude Code — prevent file deletion, credential leaks, git disasters, and token waste during autonomous AI coding sessions.
agent-chat-plugin
Peer AI agents coordinate through markdown messages in shared channel folders — group chat / blackboard, no orchestrator, autonomous zero-token waiting, cross-platform.
spec-first marketplace
Spec-first development: define a spec, implement it, and generate docs.
menhera-loop
Menhera-style Claude Code progress messages focused on missing requirements, verification, and hidden TODOs.
oh-my-pm
面向产品经理的 AI Agent 工作流系统。提供 3 种核心流程：快速 PRD（/quick-prd）、完整产品规划（/full-pm-cycle）、功能发布（/feature-launch）。包含 11 个 Skills（8 个可独立使用 + 3 个工作流编排）+ 6 个 Subagents + 4 个 Commands，原型设计推荐使用 HTML 直接生成。覆盖需求感知→策略规划→方案设计→交付协调→价值验证完整闭环。采用 Plan-and-Execute 模式，包含完整的阶段定义、状态追踪和质量门控。.