62 tagged devsecops, measured the same way as everything else here.
Browse within: DAST 34application-security 33libre-x-claude-code 32appsec 10ai-security 9cli 5cybersecurity 5
Plugin Claude Code
Bundles 11 skills, 15 commands · 2,409 tokens together
82-skill bug-hunting & external red-team bundle for Claude Code — 57 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.
AgriciDaniel/claude-cybersecurity
Plugin Claude Code
Bundles 1 skill · 201 tokens together
AI-powered cybersecurity code review with 8 specialist agents, OWASP Top 10:2021, CWE Top 25:2024, MITRE ATT&CK v15, and framework-aware false-positive suppression.
Plugin Claude Code
Bundles 2 skills, 2 commands, 5 hooks · 267 tokens together
Local-by-default, no-telemetry hooks inspect user prompts, supported tool inputs, outputs, and changed files in every enabled Claude Code or Codex session to block or mask secret leaks. Includes opt-in PII filtering and Git/CI backstops.
Plugin Claude Code
Bundles 34 skills, 4 MCP servers · 626 tokens together
Offline AI/LLM security scanner: prompt injection, MCP command injection and tool poisoning, RAG leaks, poisoned Agent Skills. Scan code, or check a skill/MCP server before you install it.
Plugin Claude Code
Bundles 3 skills · 247 tokens together
Evidence-first engineering and production audits for secure, efficient, scalable systems.
Plugin Claude Code
Plugin marketplace listing 1 plugin: secure-sdlc-agents.
Plugin Claude Code
Bundles 1 skill · 0 tokens together
Shor — autonomous AI web pentester. Provides the /shor-setup slash-command: an interactive wizard that guides you from zero to a running scan (black-box or white-box, GCP deployment included).
Plugin Claude Code
Bundles 1 command, 1 hook · 18 tokens together
Checks each package the agent is about to install and shows a line for every install, checked or not. Denies packages with malicious indicators and asks you about high-risk ones, look-alike names and anything it could not check (refused in CI).
Plugin Cursor
Bundles 31 skills, 1 MCP server · 1,499 tokens together
ControlKeel governance for Cursor — validation, findings, budgets, proofs, memory, agent routing, and human review via MCP.
Plugin Claude Code
Bundles 3 skills, 2 hooks · 57 tokens together
Security scanner for AI-agent configuration files — detects prompt injection, dangerous permissions, and credential exposure in settings.json, CLAUDE.md, MCP configs, and more.
netresearch/enterprise-readiness-skill
Plugin Claude Code
Bundles 1 skill, 2 commands · 126 tokens together
Assess and enhance software projects for enterprise-grade security, quality, and automation.
Plugin Claude Code
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
xChechi/xche-ai-app-security-pack
Plugin Claude Code
Bundles 2 skills, 1 hook · 85 tokens together
Security guardrails for AI-built apps: OWASP/API/LLM/MCP rules applied while building, an /audit skill for full reviews, and a hook that blocks secret commits.
parousia8888/web-app-security-skill
Plugin Claude Code
Bundles 1 skill · 225 tokens together
Audit and harden authorized Web projects with explainable, reproducible evidence.
Plugin Claude Code
Bundles 4 skills, 1 agent, 1 hook · 239 tokens together
Stop shipping vulnerabilities. 156 automated security checks for Claude Code. Blocks exposed API keys, disabled Supabase RLS, missing rate limiting, open CORS, and 150+ more before they reach your codebase.
Plugin Claude Code
Bundles 87 skills, 7 commands, 1 plugin · 568 tokens together
Unified Security Agent Platform — 81 cybersecurity skills + 13 cs- agents that emit a typed 11-field JSON output contract, mapped to MITRE ATT&CK and NIST CSF 2.0. Runs in any LLM. Bundles 7 slash commands (usap:run, usap:fortigate, usap:orchestrate, usap:challenge, usap:compare, usap:test, usap:README) and 6 user-inv.
Plugin Claude Code
Bundles 34 commands, 4 hooks · 467 tokens together
In-session quality governance for AI-assisted development, with advisory-first code and process gates, evidence, and multi-agent controls.
HermeticOrmus/LibreSecOps-Claude-Code
Plugin Claude Code
Bundles 2 skills, 2 commands, 2 agents · 357 tokens together
Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
Connected-Mate/corporate-launcher
Plugin Claude Code
Bundles 1 skill, 1 command, 4 agents · 346 tokens together
Generate secure, branded launchers wrapping Claude Code, Codex, Gemini, Cursor, or Cline onto a corporate AI gateway.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 55 tokens together
AI-powered security code review agent. Combines CodeQL, Semgrep (5,000+ rules), bandit, ruff, detect-secrets, Trivy (Docker image scanning), Dependabot CLI, osv-scanner, pip-audit, and npm-audit to detect vulnerabilities, hardcoded secrets, and CVEs — then delivers a prioritized, actionable security report.
Plugin Claude Code
Bundles 1 skill · 31 tokens together
Full audit and penetration testing of MCP servers — health, architecture, completeness, security.
Plugin Claude Code
Bundles 1 skill, 1 hook · 132 tokens together
Defensive, local-first security recon that briefs your AI coding agent on your OWN codebase. Read-only by default: facts + tailored probes + a calibrated findings ledger, code-in / artifacts-out, no LLM / no server / no running app. Live probes are opt-in against a TEST instance you own; production is out of scope.
uttej-badwane/secure-cloud-prompt-engineering
Plugin Claude Code
Bundles 1 skill, 5 commands, 3 agents, 3 hooks · 471 tokens together
130+ cloud security prompts plus a Claude Code skill for Infrastructure as Code review. Includes a comprehensive IaC security review skill with compliance mapping to CIS, NIST 800-53, NIST 800-171, PCI-DSS, SOC 2, HIPAA, GDPR, and ISO 27001.
Plugin Claude Code
Bundles 1 skill · 103 tokens together
Defensive, read-only security assessment of a local project (Semgrep + osv-scanner + gitleaks) with a reproducible reliability grade (0-100, A-F).
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: