73 tagged ai-security, measured the same way as everything else here.
Browse within: AI Safety 19ai-behavior-analysis 15ai-safety-research 15ai-skill-safety 14llm-security 12cybersecurity 10appsec 9devsecops 9agent-security 7agentic-ai 7claude-code-plugin 7gemini-cli-extension 5owasp 5
Plugin Claude Code
Bundles 16 skills, 37 commands, 9 agents, 3 hooks · 3,261 tokens together
AI-powered bug bounty toolkit — recon, vulnerability hunting, validation gates, and submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.
elementalsouls/Claude-BugHunter
Plugin Claude Code
Bundles 11 skills, 15 commands · 3,173 tokens together
83-skill bug-hunting & external red-team bundle for Claude Code — 58 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.
Plugin Claude Code
Marketplace for pentest-ai-agents — specialist Claude Code subagents for authorized penetration testing.
Plugin Claude Code
Bundles 2 skills · 67 tokens together
Install and manage the local-first HOL Guard package for Claude Code. This plugin guides setup and status checks; HOL Guard itself installs and owns runtime security hooks for risky commands, secrets, packages, MCP, and supply-chain activity.
Plugin Claude Code
Bundles 2 commands, 7 hooks · 29 tokens together
Adrian runtime security: observability and blocking for Claude Code sessions.
Plugin Claude Code
Bundles 1 skill · 46 tokens together
Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.
Plugin Claude Code
Bundles 1 skill · 109 tokens together
Security review and secure-coding skill covering OWASP Top 10:2025, ASVS 5.0, the OWASP LLM Top 10 (2026), and the OWASP Agentic Top 10 (2026).
Plugin Claude Code
Bundles 1 skill, 4 commands · 318 tokens together
Apply the SAIL V2 (Secure AI Lifecycle) framework by Pillar Security to secure AI applications and agents — gap analyses, security roadmaps, maturity assessments, compliance checklists, control prioritization, and vendor RFPs. Grounded in the full 91-risk SAIL catalog.
Plugin Claude Code
Bundles 2 skills · 112 tokens together
Add and manage evaluation results in Hugging Face model cards. Supports extracting eval tables from README content, importing scores from Artificial Analysis API, and running custom model evaluations with vLLM/lighteval/inspect-ai.
Plugin Claude Code
Bundles 2 skills, 1 agent, 1 plugin · 591 tokens together
AI application security for Claude — generate an AI Bill of Materials (AI-SBOM), run static analysis, behavioral validation, and adversarial red-team testing for AI agents and LLM-powered applications.
Plugin Claude Code
Bundles 1 skill · 184 tokens together
Praxen — agent behavior verifier. Compares an AI agent's declared policy (Worker Remit) against the available evidence — source code, live deployment state, or behavioral artifacts — and reports where observed behavior diverges from declared intent. Make sure your agent does its job — and only its job.
Plugin Claude Code
Bundles 2 skills, 1 agent · 379 tokens together
Skeptical-reading and prompt-injection defense for AI coding agents. Trust nothing. Ship safely.
agenisea/ai-design-engineering-cc-plugins
Plugin Claude Code
Bundles 8 skills, 8 commands, 8 agents · 888 tokens together
Human-first AI Design Engineer toolkit with 8 specialized personas for resilient agentic systems: Blueprompt (app specs), Brooks (JTBD methodology), Agenisea (multi-agent architecture), Atlas (data & ML architecture), Argus (security), Angel (backend systems), Clarity (human-first UX research & strategy), and Bliss…
Plugin Claude Code
Bundles 1 skill · 128 tokens together
Security audit and hardening for vibe-coded SaaS apps. Walks the 50 most common ways AI-generated apps get owned and produces a prioritized fix list.
Plugin Claude Code
Plugin marketplace listing 28 plugins: ai-agents-hardened-skills, coding-hardened-skills, devops-hardened-skills, documents-hardened-skills, finance-hardened-skills.
Plugin Claude Code
Bundles 34 skills, 4 MCP servers · 626 tokens together
Offline AI/LLM security scanner: prompt injection, MCP command injection and tool poisoning, RAG leaks, poisoned Agent Skills. Scan code, or check a skill/MCP server before you install it.
Plugin Claude Code
Bundles 4 skills · 346 tokens together
Four free security skills for AI-built apps. Run lictor-security-check before you ship to scan for leaked API keys, exposed databases, broken access control (IDOR), injection (SQL/XSS/command), SSRF, exposed admin/debug surfaces, missing rate limits, and prompt-injection in AI features. Then lictor-explain, lictor-fix.
Plugin Claude Code
AppSec Foundry plugins for application security work in Claude Code.
NovaCode37/claude-security-skills
Plugin Claude Code
Bundles 8 skills · 690 tokens together
Security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Runs on the standard library with no runtime dependencies.
fullstackcrew-alpha/privacy-mask
Plugin Claude Code
Bundles 1 skill · 113 tokens together
Auto-mask sensitive info in images before AI upload. 100% local.
Plugin Claude Code
Bundles 56 skills · 3,391 tokens together
753 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more.
Onome-AJ/security-sweep-plugin
Plugin Claude Code
Bundles 1 skill · 43 tokens together
Comprehensive security scanner for codebases — finds hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, and more. Covers OWASP Top 10, Mobile Top 10, and LLM Top 10.
Plugin Claude Code
Bundles 1 command, 1 hook · 18 tokens together
Checks each package the agent is about to install and shows a line for every install, checked or not. Denies packages with malicious indicators and asks you about high-risk ones, look-alike names and anything it could not check (refused in CI).
Plugin Claude Code
AKA Claude Tools guard hooks (command-guard, leak-guard, mcp-guard, post-guard) for your active profile. Requires bun. If bun is missing, the guards fail OPEN (the tool call proceeds) and announce themselves inactive at session start; with bun present, mcp-guard blocks on its own errors. For the full hardened ISOLATED.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: