cve plugins

apache/magpie

Plugin Claude Code

Apache Magpie agentic skills for maintaining open-source projects. Install the all-in-one magpie plugin, or per-family plugins to load only what you use.

apache/magpie

Plugin Claude Code

Apache Magpie — a reusable, governance-agnostic framework of agentic skills for maintaining open-source projects: release management, security triage, PR and issue workflows, contributor growth, and repo health.

apache/magpie

Plugin Claude Code

Apache Magpie — path-to-committer: activity sweeps, nominations, sentiment, readiness, committer/post-vote onboarding.

ByamB4/find-cve-agent

Plugin Claude Code

CVE hunting harness for open source security research. A 5-agent team that systematically finds, validates, and reports real vulnerabilities in open source packages.

kevinmhorvath/threat-intel-toolkit

Plugin Claude Code

A single-plugin marketplace hosting the Threat Intel Toolkit — defensive IOC triage on free, key-free open-source threat feeds.

kevinmhorvath/threat-intel-toolkit

Plugin Claude Code

Defensive IOC + vulnerability triage on free/open-source intel: a subagent plus two skills — threat-intel-lookup (aggregates 10 key-free feeds and looks up IPs, domains, URLs, CVEs) and exploit-availability-check (rates a CVE's exploit/PoC maturity via KEV, EPSS, Metasploit, Nuclei, Exploit-DB, and PoC aggregators).…

DigiCatalyst-Systems/dep-diff-mcp

Plugin Claude Code

Translates a lockfile diff into a human-readable upgrade plan for npm and PyPI.

cyanheads/nist-nvd-mcp-server

Plugin Claude Code

Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.

FoundryNet/cyber-intel-mcp

Plugin Claude Code

CVE lookup with exploit-probability (EPSS) + CISA KEV, IP/domain threat reputation, and daily threat briefs from the FoundryNet Data Network.

DevInder1/supply-chain-scanner-public

Plugin Claude Code

Comprehensive local supply-chain CVE scanning — project deps, system packages (Homebrew/apt), AND IDE extensions (VS Code, JetBrains) — with EPSS exploit-probability and CISA KEV prioritisation. Includes validate-after-patch workflow to confirm fixes. Local-first; no source code leaves the user's machine. Complements…