Security plugins

1,333 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 80fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

pm-ai-shipping

02

phuryn/pm-skills

Plugin Claude Code

Bundles 3 skills, 5 commands · 640 tokens together

AI Shipping Kit — for PMs and founders accountable for AI-built code. Document a vibe-coded app, review it for correctness, security and performance defects, and produce a reviewer-ready shipping packet.

not rated 27k +257 changed 7d ago A tokens not measured original MIT

landmines

03

chromium/chromium

Plugin Gemini CLI

landmines. The official GitHub mirror of the Chromium source.

not rated 25k +54 today A tokens not measured original BSD-3-Clause

watermarks-remover

04

guillaumemeyer/watermarks-remover

Plugin Claude Code

Bundles 2 skills, 1 hook · 261 tokens together

Remove multi-vendor AI provenance marks: invisible Unicode (Layer A), statistical text watermarks via rewrite (Layer B), and C2PA/EXIF/XMP/container metadata on images, documents, and media. Ships the remove-ai-marks skill (thin client over the repo's HTTP service) and the self-contained clean-user-facing-text skill.

not rated 24k +470 changed 1mo ago A tokens not measured original MIT

prowler

05

prowler-cloud/prowler

Plugin Claude Code

Bundles 1 skill · 24 tokens together

Prowler for Claude Code — cloud security and compliance skills powered by the Prowler MCP server. Bundles compliance triage and remediation; more skills coming.

not rated 15k +48 2d ago A tokens not measured original Apache-2.0

openmed-skills

07

maziyarpanahi/openmed

Plugin Claude Code

Bundles 74 skills · 11,398 tokens together

De-identify PHI, run clinical NER, export FHIR, evaluate with leakage gates, and the healthcare workflows around them.

not rated 5.7k +123 today A tokens not measured original Apache-2.0

Claude-BugHunter

09

elementalsouls/Claude-BugHunter

Plugin Claude Code

Bundles 11 skills, 15 commands · 3,173 tokens together

83-skill bug-hunting & external red-team bundle for Claude Code — 58 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.

not rated 5.2k yesterday A tokens not measured original MIT

ShiroAttack2

10

SummerSec/ShiroAttack2

Plugin Claude Code

Bundles 1 skill · 134 tokens together

A security testing tool for Apache Shiro, a Java framework used for user login and access control. It covers Shiro-550 vulnerability testing, including key guessing, gadget-chain detection, command execution, memory-shell injection, and key changes.

not rated 2.6k +4 4mo ago A tokens not measured original MIT

beacon

12

Asymptote-Labs/agent-beacon

Plugin Claude Code

Bundles 5 skills, 1 MCP server · 515 tokens together

Cross-harness memory from Beacon traces: recall reviewed project lessons, distill agent sessions into approved memory, promote memory to Agent Skills, build dashboard lenses, and share sessions to beacon.sh.

not rated 1.8k +17 changed 6d ago A tokens not measured original MIT

wooyun-legacy

13

tanweai/wooyun-legacy

Plugin Claude Code

Bundles 1 skill · 202 tokens together

WooYun business logic vulnerability methodology — security testing skill based on 22,132 real vulnerability cases covering 6 domains and 33 vulnerability classes.

not rated 1.8k +2 3mo ago A tokens not measured

quark

14

ev-flow/quark-engine

Plugin Claude Code

Bundles 2 skills · 63 tokens together

Quark Engine skills for Claude Code: run APK malware analysis and generate detection rules.

not rated 1.7k +2 yesterday A tokens not measured GPL-3.0

hephaestus

16

agentlas-ai/Agentlas-OS

Plugin Claude Code

Bundles 4 agents, 6 hooks · 135 tokens together

Open Agent OS for Claude Code, Codex, and Cursor: meta-agent builder, A2A Hub routing, local ontology, memory/security gates.

not rated 1.6k +24 changed today A tokens not measured original Apache-2.0

atmos

17

cloudposse/atmos

Plugin Claude Code

Bundles 54 skills · 2,551 tokens together

Atmos skills for AI coding assistants: Terraform/OpenTofu/Helmfile/Packer/Ansible orchestration, stacks, remote imports, components, immutable vendoring and Component Updater PRs, containers, emulators, Native CI, SBOM provenance, Atmos Pro, Auth, GitOps, secrets, cache, hooks, shared steps, workflows, version tracks.

not rated 1.4k +4 changed 4d ago A tokens not measured original Apache-2.0

open-claw-skills

19

prompt-security/clawsec

Plugin Claude Code

Bundles 7 skills · 272 tokens together

open-claw-skills. A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.

not rated 1.1k +5 today A tokens not measured AGPL-3.0

hackingtool

20

AKCodez/hackingtool-plugin

Plugin Claude Code

Bundles 1 skill · 132 tokens together

183+ pentesting and OSINT tools (nmap, nuclei, amass, subfinder, httpx, sherlock, maigret, trufflehog, sqlmap, impacket, and more) wired into Claude Code as a single skill. Runs locally on any OS via native Bash, WSL, or purpose-built Docker images (instrumentisto/nmap, projectdiscovery/nuclei, caffix/amass, etc.).…

not rated 1.1k +13 16d ago A tokens not measured

mcp-scanner

21

cisco-ai-defense/mcp-scanner

Plugin Claude Code

Bundles 1 skill, 9 commands · 187 tokens together

Security scanning for MCP servers using YARA rules, LLM analysis, and Cisco AI Defense. Detect prompt injection, tool poisoning, and other threats in MCP tools, prompts, and resources.

not rated 1.1k +5 yesterday A tokens not measured original Apache-2.0

cis-controls

22

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Plugin Claude Code

Bundles 1 skill · 140 tokens together

CIS Controls v8 (CIS Top 18) advisor — Implementation Group scoping (IG1/IG2/IG3), gap assessments across all 153 safeguards, asset/software inventory, data protection, secure configuration, MFA and access control, vulnerability management, audit log management, malware defenses, incident response, penetration testing.

not rated 965 +15 changed 13d ago A tokens not measured original MIT

hol-guard

23

hashgraph-online/hol-guard

Plugin Claude Code

Bundles 2 skills · 67 tokens together

Install and manage the local-first HOL Guard package for Claude Code. This plugin guides setup and status checks; HOL Guard itself installs and owns runtime security hooks for risky commands, secrets, packages, MCP, and supply-chain activity.

not rated 926 +75 today A tokens not measured original Apache-2.0

unifi-access

24

sirkirby/unifi-mcp

Plugin Claude Code

Bundles 3 skills · 186 tokens together

UniFi Access MCP server — manage door locks, credentials, visitors, and access policies.

not rated 911 +25 changed today A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: