Security plugins

1,334 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

mint

265

AgriciDaniel/claude-mint

Plugin Claude Code

Bundles 1 skill · 27 tokens together

Intelligent Linux system assistant for Cinnamon-based desktops. Directive-based workflows for security hardening, system updates, GPU management, desktop customization, performance tuning, and troubleshooting.

not rated 12 6mo ago A tokens not measured original MIT

aka

266

akasecurity/ai-tc

Plugin Claude Code

Bundles 10 commands, 8 hooks · 109 tokens together

AI Traffic Control — inspect and govern AI prompts in Claude Code. Detection runs locally; events are recorded to a local SQLite store on your machine.

not rated 12 +1 changed 3d ago A tokens not measured original Apache-2.0

huntbot

267

Matador-og/huntbot

Plugin Claude Code

Bundles 1 skill · 48 tokens together

Autonomous offensive security pipeline — bug bounty, pentesting, red teaming.

not rated 12 1mo ago A tokens not measured

skill-security

268

ai-mindset-org/pos-sprint

Plugin Claude Code

Bundles 1 skill, 1 command · 140 tokens together

Global meta-skill for security auditing and rebuilding Claude Code skills. Analyzes any skill against a 7-volume checklist, rebuilds with dual memory and credential isolation, validates, and loops until 100% compliance.

not rated 12 +1 7mo ago A tokens not measured

security-sweep

270

Onome-AJ/security-sweep-plugin

Plugin Claude Code

Bundles 1 skill · 43 tokens together

Comprehensive security scanner for codebases — finds hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, and more. Covers OWASP Top 10, Mobile Top 10, and LLM Top 10.

not rated 12 6mo ago A tokens not measured original MIT

forge

272

itsbroken-ai/forge-plugin

Plugin Claude Code

Bundles 6 skills · 603 tokens together

Security-first development skills powered by the F.O.R.G.E. framework. Built by operators, not consultants. Makes Claude security-aware by default with audit, threat modeling, code hardening, attack surface recon, and structured security workflows.

not rated 11 6d ago A tokens not measured original MIT archived

aka-claude-tools

275

akasecurity/claude-tools

Plugin Claude Code

Bundles 3 hooks

AKA Claude Tools guard hooks (command-guard, leak-guard, mcp-guard, post-guard) for your active profile. Requires bun. If bun is missing, the guards fail OPEN (the tool call proceeds) and announce themselves inactive at session start; with bun present, mcp-guard blocks on its own errors. For the full hardened ISOLATED.

not rated 11 changed 6d ago A tokens not measured original MIT

pyobfus

276

zhurong2020/pyobfus

Plugin Claude Code

Bundles 2 skills, 1 MCP server · 254 tokens together

Protect Python source before shipping it — obfuscate AND verify the output still runs. Wraps the pyobfus obfuscator (AST-based, framework-aware, AI-debuggable) and its MCP server.

not rated 11 2d ago A tokens not measured original Apache-2.0

wordpress-plugin-core

278

eugenepyvovarov/mcpbundler-agent-skills-marketplace

Plugin Claude Code

Bundles 1 skill · 98 tokens together

Build secure WordPress plugins with hooks, database interactions, Settings API, custom post types, and REST API. Covers Simple, OOP, and PSR-4 architecture patterns plus the Security Trinity. Includes WordPress 6.7-6.9 breaking changes. Use when creating plugins or troubleshooting SQL injection, XSS, CSRF, REST API…

not rated 11 8mo ago A tokens not measured original MIT

clawvet-guard

279

MohibShaikh/clawvet

Plugin Claude Code

Bundles 1 skill · 60 tokens together

Scan a skill with ClawVet and act on its risk grade before trusting it.

not rated 11 changed 10d ago A tokens not measured original MIT

Snyk

280

snyk/agentic-integration-wrappers

Plugin Gemini CLI

MCP configuration declaring 1 server: snyk.

not rated 11 27d ago A tokens not measured original Apache-2.0

agentfile

281

dennishavermans/agentfile

Plugin Claude Code

Bundles 1 skill, 1 hook · 51 tokens together

Catches agent configuration that grants more than it appears to: permission rules whose wildcards reach further than they read, broken skill references, and MCP servers that will silently fail to load.

not rated 11 17d ago A tokens not measured original MIT

safe-plugin

282

taoq-ai/ziran

Plugin Claude Code

Bundles 1 MCP server

safe-plugin. ZIRAN finds the vulnerabilities in AI agents that come from tools combining, not from any single prompt. Graph-based tool chain discovery, execution-level side-effect detection, multi-phase campaigns.

not rated 11 yesterday A tokens not measured original Apache-2.0

dependabot-sweep

284

harnessprotocol/harness-kit

Plugin Claude Code

Bundles 1 skill · 149 tokens together

End-to-end Dependabot remediation: fetch open alerts, fix per ecosystem, verify, and open/merge a PR.

not rated 10 yesterday A tokens not measured original Apache-2.0

tsm

287

tashian/tsm

Plugin Claude Code

Bundles 1 skill · 106 tokens together

Touch-ID-gated secrets for AI coding agents. Provides safe credential injection for tools and MCP servers.

not rated 10 changed 8d ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: