Plugin Claude Code
OpenTaint skills extend built-in security rules and code models for your dependencies and frameworks, then find vulnerabilities with whole-program static taint analysis.
Plugin Claude Code
Find application-specific vulnerabilities with whole-program static taint analysis and write rules and dependency models for future scans.
Plugin Claude Code
VulnScout plugins for AI-assisted whitebox security review, deterministic local quick scans, evidence-backed verification, portable reports, and one-release whitebox-pentest compatibility aliases.
Plugin Claude Code
Claude Code plugin for whitebox security review. Stable: deterministic offline quick scan, shared findings.json with stable keys and hotspot-aware findings, SARIF/Markdown/HTML/bundle reports, suppressions, CI fail-on gate, Kuzushi parity. Beta: deep profile with Joern/CodeQL/Slither/Trivy/Checkov when installed.…
Onome-AJ/security-sweep-plugin
Plugin Claude Code
Plugin marketplace listing 1 plugin: security-sweep.
Onome-AJ/security-sweep-plugin
Plugin Claude Code
Comprehensive security scanner for codebases — finds hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, and more. Covers OWASP Top 10, Mobile Top 10, and LLM Top 10.
tinoimammp/vantage-security-agent
Plugin Claude Code
Marketplace for the vantage AI SAST plugin (web + mobile pentest pipeline).
tinoimammp/vantage-security-agent
Plugin Claude Code
Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…
Plugin Claude Code
Self-hosted marketplace for the zzop plugin — deterministic cross-repo contract analysis (frontend calls x backend routes x DB tables) for AI agents.
Plugin Claude Code
Deterministic cross-repo contract analysis for AI agents: which frontend calls hit which backend endpoints (and which don't) — exact joins, disclosed blind spots, no guessing. TypeScript/JavaScript, Python, Java, C#, Rust, Go, Prisma, SQL natively; anything else via a documented adapter envelope. First install only…
Yashvendra/claude-security-skills
Plugin Claude Code
Deep, architecture-aware vulnerability discovery for Claude Code — finds what static scanners miss.
Yashvendra/claude-security-skills
Plugin Claude Code
Build deep architectural context through ultra-granular code analysis before vulnerability hunting.
ReeperReepx/Security-Audit-Claude-Skill
Plugin Claude Code
Enterprise-grade security audit skill for Claude Code. Performs comprehensive SAST, secrets detection, dependency auditing, IaC review, API security, and auto-remediation across any codebase with PDF report generation.