1,334 tagged Security, measured the same way as everything else here.
Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45
dungnotnull/hybrid-harness-chaos-process-prm
Plugin Claude Code
Bundles 37 skills, 4 commands · 4,202 tokens together
A 36-skill agentic workflow for platform engineering — spanning CI/CD, security, chaos engineering, observability, governance, compliance, deep research, system optimization, documentation, and adversarial critique. Purpose-built for AI-assisted development.
Plugin Claude Code
Bundles 1 skill · 214 tokens together
Generates a complete production-ready deployment setup for any app in one pass: Dockerfile, docker-compose, CI/CD pipeline, security hardening, and scalability config. Also audits existing Dockerfiles and CI setups with a static scoring script.
Plugin Claude Code
Bundles 4 skills · 346 tokens together
Four free security skills for AI-built apps. Run lictor-security-check before you ship to scan for leaked API keys, exposed databases, broken access control (IDOR), injection (SQL/XSS/command), SSRF, exposed admin/debug surfaces, missing rate limits, and prompt-injection in AI features. Then lictor-explain, lictor-fix.
Plugin Claude Code
Bundles 1 skill, 5 hooks · 29 tokens together
Memory → Evaluation → Credential → Access Control for AI agents. Persistent memory with W3C Verifiable Credentials, capability-based access control, drift detection, and FSRS-6 spaced repetition.
Plugin Claude Code
Bundles 3 skills · 247 tokens together
Evidence-first engineering and production audits for secure, efficient, scalable systems.
PacktPublishing/The-Claude-Code-Operating-Model
Plugin Claude Code
Bundles 1 skill, 1 command, 1 agent · 59 tokens together
Team standardized development toolkit: security scanning, review commands, and a dangerous-command guard.
Plugin Claude Code
Bundles 1 skill · 35 tokens together
Use when a user asks to scan a repository for dependency vulnerabilities, insecure code patterns, CVEs, or OWASP Top 10 risks.
Plugin Claude Code
Bundles 3 skills, 5 hooks, 1 MCP server · 287 tokens together
Semgrep Guardian: Scans agent-generated code for security vulnerabilities.
Plugin Claude Code
AppSec Foundry plugins for application security work in Claude Code.
kirollosatef/customgpt-claude-quadruple-verification
Plugin Claude Code
Quadruple verification for Claude Code — automatically blocks placeholder code, security vulnerabilities, and ensures output quality on every operation. Built by CustomGPT.ai for production teams.
Plugin Claude Code
Bundles 7 skills · 625 tokens together
Android development review skills covering OWASP MASVS security audit, Clean Architecture, performance optimization, Jetpack Compose best practices, privacy compliance auditing, and Google Play Store compliance.
securityfortech/hacking-skills
Plugin Claude Code
Bundles 28 skills · 2,564 tokens together
Web application security skills covering recon, authentication, authorization, session management, injection, client-side attacks, and business logic. Distilled from OWASP WSTG, security research, and bug bounty writeups.
Plugin Claude Code
Bundles 1 skill · 232 tokens together
Configure HawkScan in your CI/CD pipeline. Provider-agnostic: detects GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines, Bitbucket, Buildkite, and other CI systems from repo files, edits the pipeline file in place to add a HawkScan job, and prompts for HAWKAPIKEY storage (CI-native secrets store or extern.
Plugin Claude Code
Bundles 3 skills, 1 command · 192 tokens together
Java quality toolkit — security (OWASP), performance (N+1, memory, threading), and testing (JUnit 5, Mockito, Testcontainers) for Java 8+ projects.
Plugin Claude Code
Bundles 7 skills · 296 tokens together
Binary analysis skills for VulHunt MCP - decompilation, dataflow analysis, pattern matching, and more.
oscal-compass-lab/compliance-trestle-skills
Plugin Claude Code
Bundles 17 skills, 10 agents, 2 hooks, 1 plugin · 2,081 tokens together
Manage OSCAL compliance packages using Compliance Trestle - a CNCF sandbox project for machine-readable compliance documentation (NIST OSCAL standard).
Plugin Claude Code
Bundles 10 skills · 1,972 tokens together
Implement controls from the Singapore Government Cybersecurity Control Catalog.
Plugin Cursor
Bundles 1 skill · 118 tokens together
1Password Developer Environments for Cursor: MCP tools to create, import, and manage project secrets; an agent skill with the full import-and-mount workflow; and a hook that validates local .env mounts before shell commands run. Requires the 1Password desktop app on macOS or Linux with Integrate with MCP clients…
Plugin Claude Code
Bundles 3 skills · 307 tokens together
Connect a local AI agent to registered SSH servers with user-opened key or password authentication, scoped sessions and explicit shutdown.
Plugin Claude Code
Bundles 1 skill · 54 tokens together
Evaluates packages, manages dependencies, and addresses supply chain security.
Plugin Claude Code
Bundles 15 skills, 7 agents, 1 MCP server · 639 tokens together
A dev pipeline for Claude Code that will not call work done until tests, lint and a security audit all exit zero. Seven specialists run it, for 1.1k tokens of always-on context.
Plugin Claude Code
Bundles 14 skills, 5 commands · 353 tokens together
CI/CD supply chain hardening for Rust projects — Trusted Publishing, SLSA provenance, Scorecard, cargo-deny, and more.
Plugin Claude Code
Bundles 2 commands, 4 hooks · 48 tokens together
Accountable autonomy for Claude Code. PreToolUse runs a two-layer check on Bash, WebFetch, WebSearch, Write, Edit, NotebookEdit, Task, SendMessage and MCP calls (regex deny patterns on shell, web and file mutation; conformal risk scorer on MCP). PostToolUse writes a hash-chained SQLite audit record across the same set.
Plugin Claude Code
Bundles 1 skill, 1 command · 77 tokens together
Security-focused differential review of code changes with git history analysis and blast radius estimation.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: