Security plugins

smrafiz/claude-supercharger

Plugin Claude Code

Bundles 69 commands, 10 agents, 29 hooks · 3,247 tokens together

Shell-level guardrails for Claude Code. Command blocking, code security scanner, self-teaching, token economy, agent routing, MCP profiles, and session memory.

ant4g0nist/ChiefWiggum

Plugin Claude Code

Bundles 7 commands, 3 hooks · 56 tokens together

Iterative vulnerability hunter with four-phase explore/deep-dive methodology built on Ralph Wiggum's self-referential loop pattern.

Ap6pack/outrider-recon

Plugin Claude Code

Bundles 11 skills · 614 tokens together

Claude-native, governed offensive-OSINT and external attack-surface platform for authorized security teams: multi-agent recon across web/API, identity, cloud, secrets, and people/breach intelligence, with deterministic scope, evidence, and approval controls, a governed agent-to-agent orchestrator, and human-reviewed…

AikidoSec/aikido-claude-plugin

Plugin Claude Code

Bundles 4 skills, 1 MCP server · 342 tokens together

Aikido Security for Claude Code: scan code (SAST, secrets, IaC) and list all issues from your Aikido feed powered by the Aikido MCP server.

humanbound/plugins

Plugin Claude Code

Bundles 4 skills, 6 commands · 402 tokens together

Run adversarial / security tests against your local AI agent. Detects your FastAPI server, exposes it via ngrok, you author bot-config.json with your endpoints / auth / payload, the plugin dispatches via the humanbound MCP — results delivered by email (or run /humanbound-test:resume to watch the polling loop and f.

jonaslejon/linux-security-audit-plugin

Plugin Claude Code

Bundles 1 skill · 149 tokens together

Audit a Linux host's security hardening posture and produce a risk-ranked report, using both passive config inspection and active service probing. Runs against a live host, a mounted image (--root), or a container.

maludb-ed/skill-safety-checker

Plugin Claude Code

Bundles 1 skill · 79 tokens together

Security-audits installed Claude Code skills and marketplace plugins for data capture, secret exfiltration, prompt injection, and malicious code. Always leads with a disclaimer that detection cannot be guaranteed complete.

ariaxhan/kernel-claude

Plugin Claude Code

Bundles 27 skills, 10 agents, 4 hooks · 1,528 tokens together

KERNEL is a Claude Code and Codex runtime for direct, decomposed execution with local memory and minimal hooks. Version 9.11.0 deploys the simplify deletion doctrine, preflight and verifier contract. Skills invoke as /kernel: on Claude Code and $kernel: on Codex; run /kernel:help first. Agent-readable summa.

Kaademos/secure-sdlc-agents

Plugin Claude Code

Lists 1 plugin

Plugin marketplace listing 1 plugin: secure-sdlc-agents.

willwebster5/agent-skills

Plugin Claude Code

Bundles 1 skill · 61 tokens together

Design multi-event behavioral detection rules using CrowdStrike NG-SIEM correlate() function for attack chain detections across AWS, EntraID, and CrowdStrike data sources.

own2pwn-fr/burpwn

Plugin Claude Code

Bundles 1 skill · 116 tokens together

AI-driven intercepting proxy + rootless execution sandbox for web pentesting. Installs the burpwn skill, which teaches the agent to create a session and route target-facing network commands through burpwn exec so their traffic is captured, MITM-decrypted, searchable, replayable, and live-interceptable. Requires the.

aman-2709/superpowers-ecc

Plugin Claude Code

Bundles 24 skills, 24 commands, 7 agents, 3 hooks · 1,318 tokens together

Disciplined workflow skills, security review, learning system, and cross-platform tooling for Claude Code.

tr4m0ryp/shor

Plugin Claude Code

Bundles 1 skill · 0 tokens together

Shor — autonomous AI web pentester. Provides the /shor-setup slash-command: an interactive wizard that guides you from zero to a running scan (black-box or white-box, GCP deployment included).

CrowdStrike/crowdstrike-mcp-skills

Plugin Claude Code

Bundles 1 skill · 47 tokens together

Configure the CrowdStrike Falcon MCP server with OAuth2 authentication using client credentials.

kevinmhorvath/threat-intel-toolkit

Plugin Claude Code

Bundles 2 skills, 1 agent · 609 tokens together

Defensive IOC + vulnerability triage on free/open-source intel: a subagent plus two skills — threat-intel-lookup (aggregates 10 key-free feeds and looks up IPs, domains, URLs, CVEs) and exploit-availability-check (rates a CVE's exploit/PoC maturity via KEV, EPSS, Metasploit, Nuclei, Exploit-DB, and PoC aggregators).…

NovaCode37/claude-security-skills

Plugin Claude Code

Bundles 8 skills · 690 tokens together

Security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Runs on the standard library with no runtime dependencies.

pezhik/skilltotal

Plugin Claude Code

Bundles 1 command, 1 hook · 18 tokens together

Checks each package the agent is about to install and shows a line for every install, checked or not. Denies packages with malicious indicators and asks you about high-risk ones, look-alike names and anything it could not check (refused in CI).

eyesecurity/skills

Plugin Claude Code

Bundles 4 skills · 338 tokens together

Protects the npm and PyPI supply chains — hardens npm/pnpm/Yarn v2+ and uv/pip/Poetry/pdm projects locally and in GitHub Actions CI.

pi-sloane/claude-plugin

Plugin Claude Code

Bundles 6 skills, 1 MCP server · 228 tokens together

Pi Security workflows for Claude Code and Cowork: investigate findings, review security posture, fetch remediation guidance, start design reviews, submit Markdown reports, and query secure-development playbooks through Pi's hosted MCP server.

DouglasRao/Claude-Pentest-Skills

Plugin Claude Code

Bundles 8 skills · 902 tokens together

Professional penetration testing skills for Claude Code — structured offensive workflows covering two independent tracks: (1) Web track: web-recon, web-exploitation, web-postexploitation, web-report; (2) AD track: ad-recon, ad-exploitation, ad-postexploitation, ad-report. All skills include automatic evidence capture.

fullstackcrew-alpha/privacy-mask

Plugin Claude Code

Bundles 1 skill · 113 tokens together

Auto-mask sensitive info in images before AI upload. 100% local.

Mikaru0Mystic/sectinel

Plugin Claude Code

Bundles 56 skills · 3,391 tokens together

753 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more.

brolag/neural-claude-code

Plugin Claude Code

Bundles 8 skills, 3 hooks · 551 tokens together

Lightweight Claude Code harness: 5 security hooks + a discover -> spec -> craft -> vet/exercise pipeline. Zero dependencies; runs on vanilla Claude Code.

altic-dev/envault

Plugin Claude Code

Bundles 1 skill · 35 tokens together

Use when managing environment variables across projects, working with .env files, setting up project secrets, or using the envault CLI tool for centralized env var management.