appsec plugins

53 tagged appsec, measured the same way as everything else here.

Browse within: devsecops 13ai-security 11owasp 8cybersecurity 6agentic-appsec 5agentic-workflows 5

Quant-Off/skills

Plugin Claude Code

Audits a codebase or file for exploitable vulnerabilities across injection, authorization, secrets, memory safety, deserialization, SSRF, and dependency risk, gating every candidate through six reachability and impact reviews before reporting. Not for deep crypto review or binary verification.

1 22d ago A tokens not measured original MIT

oswe

50

Laucked-Security/claude-oswe

Plugin Claude Code

Deep white-box OSWE-style web app security audit via /oswe:audit (PHP, Node.js, Python, Java, .NET) — Markdown + visual HTML reports. By Laucked Security.

1 1mo ago A tokens not measured original MIT

shipcheck

52

noureldeensalama/shipcheck

Plugin Claude Code

Pre-launch risk scanner for AI-built apps. Flags exposed secrets, copyleft-licensed dependencies, unauthenticated data endpoints, missing privacy/consent artifacts, and client-side payment handling before you ship.

0 7d ago A tokens not measured original MIT