application-security plugins

38 tagged application-security, measured the same way as everything else here.

Browse within: devsecops 33DAST 32libre-x-claude-code 32

Claude-BugHunter

01

elementalsouls/Claude-BugHunter

Plugin Claude Code

Bundles 11 skills, 15 commands · 3,173 tokens together

83-skill bug-hunting & external red-team bundle for Claude Code — 58 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.

not rated 5.2k yesterday A tokens not measured original MIT

cyber-neo

02

Hainrixz/cyber-neo

Plugin Claude Code

Bundles 1 skill · 123 tokens together

Open-source cybersecurity analysis agent. Scans any local project for vulnerabilities: code security (SAST), dependency CVEs (SCA), secret leaks, authentication/authorization flaws, cryptographic weaknesses, misconfigurations, supply chain risks, and CI/CD security. Covers all OWASP 2025 Top 10 and CWE Top 25…

not rated 289 +6 3mo ago A tokens not measured original MIT

pentest

03

humaidhahm/opencode-pentester

Plugin Claude Code

Bundles 1 skill, 12 agents · 464 tokens together

Full penetration testing framework - 69 attack categories across 16 domains covering OWASP, injection, authentication, cloud, and more.

not rated 57 +6 yesterday A tokens not measured

pixee-cli

04

pixee/pixee-cli

Plugin Claude Code

Bundles 17 skills · 717 tokens together

Skills for using the Pixee CLI: authentication, scans, workflows, repositories, findings, and API access.

not rated 31 changed yesterday A tokens not measured

shipproof

05

kingggg5/shipproof

Plugin Claude Code

Bundles 3 skills · 247 tokens together

Evidence-first engineering and production audits for secure, efficient, scalable systems.

not rated 18 changed 1mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: