appsec plugins

Zyrexnn/Cybermes

Plugin Claude Code

Plugin marketplace listing 1 plugin: claude-bughunter.

Zyrexnn/Cybermes

Plugin Claude Code

82-skill bug-hunting & external red-team bundle for Claude Code — 57 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.

AgriciDaniel/claude-cybersecurity

Plugin Claude Code

AI-powered cybersecurity code review with 8 specialist agents, OWASP Top 10:2021, CWE Top 25:2024, MITRE ATT&CK v15, and framework-aware false-positive suppression.

AgentSecOps/SecOpsAgentKit

Plugin Claude Code

Plugin marketplace listing 7 plugins: appsec-skills, devsecops-skills, secsdlc-skills, compliance-skills, incident-response-skills.

pixee/pixee-cli

Plugin Claude Code

Plugin marketplace listing 1 plugin: pixee-cli.

pixee/pixee-cli

Plugin Claude Code

Skills for using the Pixee CLI: authentication, scans, workflows, repositories, findings, and API access.

allsmog/vuln-scout

Plugin Claude Code

VulnScout plugins for AI-assisted whitebox security review, deterministic local quick scans, evidence-backed verification, portable reports, and one-release whitebox-pentest compatibility aliases.

allsmog/vuln-scout

Plugin Claude Code

Claude Code plugin for whitebox security review. Stable: deterministic offline quick scan, shared findings.json with stable keys and hotspot-aware findings, SARIF/Markdown/HTML/bundle reports, suppressions, CI fail-on gate, Kuzushi parity. Beta: deep profile with Joern/CodeQL/Slither/Trivy/Checkov when installed.…

lachydotmcg/slopsec

Plugin Claude Code

Security tooling for vibe-coded SaaS apps.

lachydotmcg/slopsec

Plugin Claude Code

Security audit and hardening for vibe-coded SaaS apps. Walks the 50 most common ways AI-generated apps get owned and produces a prioritized fix list.

fortify/skills

Plugin Claude Code

Plugin marketplace listing 1 plugin: fortify-skills.

fortify/skills

Plugin Claude Code

OpenText Fortify AppSec skills. Use for SAST/DAST/SCA scanning, vulnerability triage, audit workflows, CI/CD pipeline integration, and FCLI commands. Supports Fortify on Demand (FoD) and Software Security Center (SSC).

appsec-foundry/appsec-advisor

Plugin Claude Code

AppSec Foundry plugins for application security work in Claude Code.

appsec-foundry/appsec-advisor

Plugin Claude Code

Code-derived threat modeling plugin: the architecture model is derived from the repository, not maintained by hand. Provides AppSec-focused agents and skills for threat modeling, STRIDE analysis, dependency scanning, QA review, and security context resolution.

sbom-tool/gh-guard

Plugin Claude Code

CI/CD supply chain hardening for Rust projects — Trusted Publishing, SLSA provenance, Scorecard, cargo-deny, and more.

Kaademos/secure-sdlc-agents

Plugin Claude Code

Plugin marketplace listing 1 plugin: secure-sdlc-agents.

Kaademos/secure-sdlc-agents

Plugin Claude Code

A team of AI security specialists embedded in your coding workflow. 8 agents covering every phase of the Secure SDLC: requirements, threat modelling, code review, IaC security, compliance, and release gating. Works with Claude Code, Cursor, Windsurf, and any MCP-compatible tool.

Mikaru0Mystic/sectinel

Plugin Claude Code

Plugin marketplace listing 1 plugin: cybersecurity-skills.

Mikaru0Mystic/sectinel

Plugin Claude Code

753 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more.

endorlabs/ai-plugins

Plugin Claude Code

Endor Labs Agent Kit Claude Code plugin marketplace.

endorlabs/ai-plugins

Plugin Claude Code

Endor Labs workflow agents and setup for Claude Code.

endorlabs/ai-plugins

Plugin Claude Code

Endor Labs workflow agents and setup for Claude Code.

tr4m0ryp/shor

Plugin Claude Code

Shor — autonomous AI web pentester. Provides the /shor-setup slash-command: an interactive wizard that guides you from zero to a running scan (black-box or white-box, GCP deployment included).

Zyoffsec/airtight-secure-coding

Plugin Claude Code

Secure-coding gates for AI-written code.