42 tagged devsecops, measured the same way as everything else here.
Browse within: appsec 13ai-security 12cybersecurity 6
Plugin Claude Code
AI-powered security code review agent. Combines CodeQL, Semgrep (5,000+ rules), bandit, ruff, detect-secrets, Trivy (Docker image scanning), Dependabot CLI, osv-scanner, pip-audit, and npm-audit to detect vulnerabilities, hardcoded secrets, and CVEs — then delivers a prioritized, actionable security report.
Plugin Claude Code
Defensive security reconnaissance tooling for AI coding agents.
Plugin Claude Code
Defensive, local-first security recon that briefs your AI coding agent on your OWN codebase. Read-only by default: facts + tailored probes + a calibrated findings ledger, code-in / artifacts-out, no LLM / no server / no running app. Live probes are opt-in against a TEST instance you own; production is out of scope.
uttej-badwane/secure-cloud-prompt-engineering
Plugin Claude Code
Security-focused prompts and Claude Code skills for Infrastructure as Code review. Includes a comprehensive IaC security review skill with compliance mapping to CIS, NIST 800-53, NIST 800-171, PCI-DSS, SOC 2, HIPAA, GDPR, and ISO 27001.
Plugin Claude Code
Defensive security skills by GI.VE GROUP: read-only assessments with reproducible grades.
Plugin Claude Code
Defensive, read-only security assessment of a local project (Semgrep + osv-scanner + gitleaks) with a reproducible reliability grade (0-100, A-F).
Plugin Claude Code
Plugin marketplace listing 1 plugin: mcp-redteam.
Plugin Claude Code
Full audit and penetration testing of MCP servers — health, architecture, completeness, security.
Plugin Claude Code
Plugin marketplace listing 1 plugin: fettle.
Plugin Claude Code
In-session quality governance for AI-assisted development, with advisory-first code and process gates, evidence, and multi-agent controls.
Plugin Claude Code
Plugin marketplace listing 1 plugin: gauntlex.
Plugin Claude Code
Adversarial co-generation engine — generates code and adversarial attacks from the same spec, concurrently. Adds /gauntlex:run and friends, plus the gauntlex MCP server.
Plugin Claude Code
Deep white-box OSWE-style web app security audit via /oswe:audit (PHP, Node.js, Python, Java, .NET) — Markdown + visual HTML reports. By Laucked Security.
Plugin Claude Code
S24DeFi's shared Claude Code skills — reusable workflows, not tied to any one repo.
Plugin Claude Code
Audit a private git repo's full history (every branch, tag, and PR ref) for secrets and PII before making it public, then carry out the cleanup.
cyanheads/osv-advisory-mcp-server
Plugin Claude Code
Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.
Plugin Claude Code
Scout: deterministic, zero-token security scanner for AI-assisted coding.
Plugin Claude Code
Deterministic security scanner for AI-assisted coding. Runs Scout as an agent-callable verifier (scan -> fix -> rescan) with no inference cost.