53 tagged appsec, measured the same way as everything else here.
Browse within: devsecops 13ai-security 11owasp 8cybersecurity 6agentic-appsec 5agentic-workflows 5
Zyoffsec/airtight-secure-coding
Plugin Claude Code
Secure-coding gates for AI-written code. 70 numbered gates mapped to OWASP Top 10 and CWE, plus a pre-write guard that denies the failures it can prove: open routes, IDOR, missing CSRF tokens, interpolated queries and shell commands, raw HTML sinks, unverified webhooks, any-origin CORS with credentials, passwords…
xChechi/xche-ai-app-security-pack
Plugin Claude Code
Security guardrails for AI-built apps — drop-in rules, policy, and secret-scanning hooks.
xChechi/xche-ai-app-security-pack
Plugin Claude Code
Security guardrails for AI-built apps: OWASP/API/LLM/MCP rules applied while building, an /audit skill for full reviews, and a hook that blocks secret commits.
Plugin Claude Code
Agentic Application Security Platform (ASPM) for Claude Code. Prevents risk before code exists by rewriting prompts into secure prompts using each repository's Software Graph and organizational security and compliance policies. Run differential SAST, SCA, and Secrets scans and AutoFix risks directly from your IDE…
tinoimammp/vantage-security-agent
Plugin Claude Code
Marketplace for the vantage AI SAST plugin (web + mobile pentest pipeline).
tinoimammp/vantage-security-agent
Plugin Claude Code
Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…
UnboundCompute/security-agent-skills
Plugin Claude Code
Plugin marketplace listing 1 plugin: security-agent-skills.
UnboundCompute/security-agent-skills
Plugin Claude Code
Security-testing methodology as portable agent skills, spanning white-box bug hunting, AI-agent and LLM red-teaming, cloud identity and CI/CD trust, client-app trust surfaces across browser and editor extensions and Electron, wire-protocol and token trust across gRPC, WebSocket, and JWT, infrastructure-as-code and…
parousia8888/web-app-security-skill
Plugin Claude Code
Security skills for authorized Web product review and hardening.
parousia8888/web-app-security-skill
Plugin Claude Code
Audit and harden authorized Web projects with explainable, reproducible evidence.
Plugin Claude Code
Plugin marketplace listing 1 plugin: gauntlet-loop.
Plugin Claude Code
Skills packaging the Gauntlet Loop — build → blind-critic → revise → repeat against a hard bar — for coding, writing, design, data, research, prompt evaluation, detection engineering, and authorized security testing.
Plugin Claude Code
Claude Code skills by Ravindra Kele. Currently: a deep, multi-agent security audit pipeline.
Plugin Claude Code
Multi-agent security audit that reads and understands code, adversarially verifies every finding, and scores honest CVSS 3.1. Read-only by default.
Plugin Claude Code
Plugin marketplace listing 1 plugin: patchman.
Plugin Claude Code
Defensive security audit mode for authorized code review and architecture assessment.
Plugin Claude Code
Defensive security reconnaissance tooling for AI coding agents.
Plugin Claude Code
Defensive, local-first security recon that briefs your AI coding agent on your OWN codebase. Read-only by default: facts + tailored probes + a calibrated findings ledger, code-in / artifacts-out, no LLM / no server / no running app. Live probes are opt-in against a TEST instance you own; production is out of scope.
Plugin Claude Code
Security review skills for Claude Code.
Plugin Claude Code
Web application security review skills: architecture recon, 33 vulnerability-class detectors, and a consolidated severity-ranked report.
Plugin Claude Code
Security audit automation plugins for Claude Code.
Plugin Claude Code
Security audit automation. RECON → SCAN → ATTACK → REPORT.
Plugin Claude Code
Security-research toolkit for Claude Code: source-level cryptographic auditing, Ghidra-driven binary verification of constant-time and zeroization guarantees, and zero-trust codebase security auditing. Every skill gates findings on traced evidence before reporting.
Plugin Claude Code
Verifies in compiled machine code that secret zeroization survived dead-store elimination and that constant-time logic did not regain secret-dependent branches. Ships a Ghidra headless inventory script. Use when auditing a binary, shared object, or firmware image against a source-level guarantee.