DAST plugins

fortify/skills

Plugin Claude Code

Bundles 9 skills, 2 agents · 1,032 tokens together

OpenText Fortify AppSec skills. Use for SAST/DAST/SCA scanning, vulnerability triage, audit workflows, CI/CD pipeline integration, and FCLI commands. Supports Fortify on Demand (FoD) and Software Security Center (SSC).

tr4m0ryp/shor

Plugin Claude Code

Bundles 1 skill · 0 tokens together

Shor — autonomous AI web pentester. Provides the /shor-setup slash-command: an interactive wizard that guides you from zero to a running scan (black-box or white-box, GCP deployment included).

draugr-dev/draugr

Plugin Claude Code

Bundles 1 hook

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

HermeticOrmus/LibreSecOps-Claude-Code

Plugin Claude Code

Bundles 1 skill, 1 command, 2 agents · 244 tokens together

API security assessment for REST, GraphQL, gRPC, and WebSocket interfaces against the OWASP API Security Top 10, including authentication flow audits and secure auth patterns.

runverdict/sf-security-review-toolkit

Plugin Claude Code

Bundles 14 skills, 1 hook · 1,677 tokens together

Skills that prepare an ISV partner for the AppExchange/AgentExchange security review end to end — autonomous multi-agent codebase audit, submission-artifact generation, scan orchestration, test-environment runbooks, and an honest readiness verdict.