security tools plugins

15 tagged security tools, measured the same way as everything else here.

prowler

02

prowler-cloud/prowler

Plugin Claude Code

Prowler for Claude Code — cloud security and compliance skills powered by the Prowler MCP server. Bundles compliance triage and remediation; more skills coming.

15k 3d ago A tokens not measured original Apache-2.0

narsil-mcp

03

postrv/narsil-mcp

Plugin Claude Code

Plugin marketplace listing 1 plugin: narsil.

181 3mo ago A tokens not measured original Apache-2.0

narsil-plugin

04

postrv/narsil-mcp

Plugin Claude Code

Code intelligence plugin for narsil-mcp. Provides guidance for using 90 code analysis tools including security scanning, call graph analysis, symbol search, supply-chain SBOM, and SPARQL/CCG knowledge graph export.

181 3mo ago A tokens not measured original Apache-2.0

opentaint

07

seqra/opentaint

Plugin Claude Code

OpenTaint skills extend built-in security rules and code models for your dependencies and frameworks, then find vulnerabilities with whole-program static taint analysis.

149 2d ago A tokens not measured original Apache-2.0

opentaint

08

seqra/opentaint

Plugin Claude Code

Find application-specific vulnerabilities with whole-program static taint analysis and write rules and dependency models for future scans.

149 2d ago A tokens not measured original Apache-2.0

ponytail-sec

09

andypitcher/ponytail-sec

Plugin Claude Code

Security-hardening review for AI agents. The smallest change that ruins an attacker's day.

8 3d ago A tokens not measured original MIT

ponytail-sec

10

andypitcher/ponytail-sec

Plugin Claude Code

Ponytail security companion and audit: diff-scoped hardening for active development, plus full-project security scans.

8 3d ago A tokens not measured original MIT

vantage

12

tinoimammp/vantage-security-agent

Plugin Claude Code

Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…

4 1mo ago A tokens not measured original MIT

websec

13

emre-guler/websec

Plugin Claude Code

Security review skills for Claude Code.

2 4d ago A tokens not measured original MIT

websec

14

emre-guler/websec

Plugin Claude Code

Web application security review skills: architecture recon, 33 vulnerability-class detectors, and a consolidated severity-ranked report.

2 4d ago A tokens not measured original MIT

core-engineering

15

JustineDevs/premortem

Plugin Claude CodeCodex

Plugin marketplace listing 1 plugin: core-engineering.

2 1mo ago A tokens not measured original Apache-2.0