14 tagged owasp, measured the same way as everything else here.
Browse within: ai-security 5appsec 5
Plugin Claude Code
Bundles 9 skills · 444 tokens together
Security audit your project with Ship Safe — 29 agents, 80+ attack classes, real-time Claude Code hooks, deep LLM analysis, and CI mode.
Plugin Claude Code
Bundles 1 skill · 184 tokens together
Praxen — agent behavior verifier. Compares an AI agent's declared policy (Worker Remit) against the available evidence — source code, live deployment state, or behavioral artifacts — and reports where observed behavior diverges from declared intent. Make sure your agent does its job — and only its job.
Plugin Claude Code
Bundles 1 skill · 118 tokens together
Find and fix security issues in vibecoded apps. Scan a live URL, a local repo, or your macOS machine for TLS, headers, auth, secrets, IDOR/OAuth, and injection issues, then apply framework-aware fixes and re-scan to verify. Mapped to OWASP with SARIF output. Runs as a skill or CLI. Authorized testing only.
Plugin Claude Code
Bundles 1 skill · 35 tokens together
Use when a user asks to scan a repository for dependency vulnerabilities, insecure code patterns, CVEs, or OWASP Top 10 risks.
Plugin Claude Code
AppSec Foundry plugins for application security work in Claude Code.
Onome-AJ/security-sweep-plugin
Plugin Claude Code
Bundles 1 skill · 43 tokens together
Comprehensive security scanner for codebases — finds hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, and more. Covers OWASP Top 10, Mobile Top 10, and LLM Top 10.
Plugin Claude Code
Bundles 1 skill · 50 tokens together
Pre-launch security audit for web apps. Runs OWASP checks via shell scripts, then AI analyzes findings. Covers rate limiting, hosting bypass, data exposure, headers, session security, AI risks.
Zyoffsec/airtight-secure-coding
Plugin Claude Code
Bundles 1 skill, 1 hook · 63 tokens together
Secure-coding gates for AI-written code. 70 numbered gates mapped to OWASP Top 10 and CWE, plus a pre-write guard that denies the failures it can prove: open routes, IDOR, missing CSRF tokens, interpolated queries and shell commands, raw HTML sinks, unverified webhooks, any-origin CORS with credentials, passwords…
tinoimammp/vantage-security-agent
Plugin Claude Code
Bundles 1 skill, 6 commands · 384 tokens together
Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…
Plugin Claude Code
Bundles 4 skills, 1 agent, 1 hook · 239 tokens together
Stop shipping vulnerabilities. 156 automated security checks for Claude Code. Blocks exposed API keys, disabled Supabase RLS, missing rate limiting, open CORS, and 150+ more before they reach your codebase.
Plugin Claude Code
Bundles 4 skills, 18 agents · 695 tokens together
Security audit automation. RECON → SCAN → ATTACK → REPORT.
Plugin Claude Code
Bundles 2 skills, 1 agent · 215 tokens together
OWASP Top 10:2025 rules for writing and reviewing backend/API code in any language, plus /api-secure-report — a full security inventory of every HTTP route in a project.
ReeperReepx/Security-Audit-Claude-Skill
Plugin Claude Code
Bundles 1 skill, 1 agent · 58 tokens together
Enterprise-grade security audit skill for Claude Code. Performs comprehensive SAST, secrets detection, dependency auditing, IaC review, API security, and auto-remediation across any codebase with PDF report generation.
Plugin Claude Code
Bundles 1 skill · 129 tokens together
Static security audit skill for web application codebases: stack triage, checklist-driven scan, and a PASS/FAIL/MANUAL-REVIEW report with file:line evidence and remediation code.