CVE plugins

8 tagged CVE, measured the same way as everything else here.

Browse within: apache 14

magpie

01

apache/magpie

Plugin Claude Code ✓ vendor

Bundles 1 skill, 12 plugins · 131 tokens together

Apache Magpie — a reusable, governance-agnostic framework of agentic skills for maintaining open-source projects: release management, security triage, PR and issue workflows, contributor growth, and repo health.

not rated 118 +5 changed yesterday A tokens not measured original Apache-2.0

find-cve-agent

02

ByamB4/find-cve-agent

Plugin Claude Code

Bundles 21 skills, 7 commands, 5 agents · 1,048 tokens together

CVE hunting harness for open source security research. A 5-agent team that systematically finds, validates, and reports real vulnerabilities in open source packages.

not rated 57 +2 7mo ago A tokens not measured original Apache-2.0

contrastapi

03

UPinar/contrastapi

Plugin Cursor

Bundles 1 MCP server

47 security research tools over remote MCP — CVE + EPSS/KEV, MITRE CWE catalog + KEV detail, domain audit + DNS/SSL/WHOIS/subdomain enum + WAF detect, IP threat intel + cloud/Tor/FireHOL classification, IOC enrichment (ThreatFox/Feodo/URLhaus), email/phone/username OSINT, code security checks, MITRE ATLAS AI/ML attack.

not rated 33 11d ago A tokens not measured original MIT

kevinmhorvath/threat-intel-toolkit

Plugin Claude Code

Bundles 2 skills, 1 agent · 609 tokens together

Defensive IOC + vulnerability triage on free/open-source intel: a subagent plus two skills — threat-intel-lookup (aggregates 10 key-free feeds and looks up IPs, domains, URLs, CVEs) and exploit-availability-check (rates a CVE's exploit/PoC maturity via KEV, EPSS, Metasploit, Nuclei, Exploit-DB, and PoC aggregators).…

not rated 13 1mo ago A tokens not measured

DevInder1/supply-chain-scanner-public

Plugin Claude Code

Bundles 7 skills · 542 tokens together

Comprehensive local supply-chain CVE scanning — project deps, system packages (Homebrew/apt), AND IDE extensions (VS Code, JetBrains) — with EPSS exploit-probability and CISA KEV prioritisation. Includes validate-after-patch workflow to confirm fixes. Local-first; no source code leaves the user's machine. Complements…

not rated 0 2mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: