Security plugins

1,334 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

borderlint

289

iolairus/borderlint

Plugin Claude Code

Bundles 1 skill · 60 tokens together

AI data-flow governance for coding agents: run borderlint before adding any AI SDK, endpoint, or model id — residency, sovereignty, and provenance checked in the conversation, before commit.

not rated 10 6d ago A tokens not measured original MIT

varsel-poc

290

erlef-cna/varsel

Plugin Claude Code

Bundles 7 skills · 0 tokens together

Varsel CNA point-of-contact skills: file and verify CVEs as Varsel cases through the Varsel MCP.

not rated 10 changed 6d ago A tokens not measured

sunglasses

292

sunglasses-dev/sunglasses

Plugin Claude Code

Bundles 1 MCP server

Local input firewall for AI agents. Scans text and files before an agent reads them. Needs pip install sunglasses first, on Python 3.9 or newer.

not rated 10 today A tokens not measured original MIT

duende-skills

293

DuendeSoftware/duende-skills

Plugin Claude Code

Bundles 26 skills, 2 agents · 1,437 tokens together

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture.

not rated 9 changed yesterday A tokens not measured

skillrx

294

felipeinf/skillRx

Plugin Claude Code

Bundles 1 command · 11 tokens together

Security scanner for AI agent skills and plugins (Claude Code, Codex, Cursor, and 40+ more).

not rated 9 5mo ago A tokens not measured

pickysteve

295

KernelLord/pickysteve

Plugin Claude Code

Bundles 1 MCP server

Skill router and context picker for coding agents — picks the right skill per prompt, scans both the request and every retrieved doc for prompt injection.

not rated 9 3mo ago A tokens not measured original MIT

kvkk-uyum-tr

297

kapital-legal/claude-for-tr-legal

Plugin Claude Code

Bundles 8 skills · 946 tokens together

KVKK m.10 aydınlatma metni üretir, ilgili kişi başvurularını (KVKK m.13/2 30 günlük süre içinde) yanıtlar, VERBİS uyumunu kontrol eder, veri ihlali triajı yapar (72 saatlik bildirim — KVKK m.12/5 + Kurul'un 24.01.2019 tarih ve 2019/10 sayılı kararı), KVKK iyi uygulama düzeyinde risk değerlendirmesi üretir ve…

not rated 9 4mo ago A tokens not measured original Apache-2.0

protect-mcp

298

ScopeBlind/scopeblind-gateway

Plugin Claude Code

Bundles 1 skill, 2 hooks, 1 MCP server · 40 tokens together

Fail-closed Cedar policy gate plus Ed25519 signed receipts for AI agent tool calls. Blocks what breaks the rules before it runs, denies on any policy error, and proves the gate is live with a startup self-test.

not rated 9 11d ago A tokens not measured fork MIT

ponytail-sec

299

andypitcher/ponytail-sec

Plugin Claude Code

Bundles 4 skills · 254 tokens together

Ponytail security companion and audit: diff-scoped hardening for active development, plus full-project security scans.

not rated 9 changed 3d ago A tokens not measured original MIT

sanctuary-framework

301

eriknewton/sanctuary-framework

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 194 tokens together

Open source wall under your AI agent: egress enforced by the OS on macOS, keys the operator holds, a hash-chained audit record. Linux: proven on Ubuntu 24.04 (x86-64) only. Wraps Claude Code, Cursor, Hermes, OpenClaw and Cline on tested config paths (Assurance Matrix: partial).

not rated 9 changed 3d ago A tokens not measured original Apache-2.0

pre-launch-audit

302

bzsasson/pre-launch-audit-skill

Plugin Claude Code

Bundles 1 skill · 92 tokens together

Run a comprehensive pre-launch website audit covering technical SEO, AI accessibility, security, performance, and on-page SEO.

not rated 9 5mo ago A tokens not measured copy · 86% MIT

claude-crap

303

ahernandez-developer/claude-crap

Plugin Claude Code

Bundles 4 skills, 5 hooks, 1 MCP server · 742 tokens together

Deterministic Quality Assurance plugin for Claude Code. Wraps every Write / Edit / Bash tool call with a PreToolUse gatekeeper, a PostToolUse verifier, and a Stop quality gate backed by CRAP index, Technical Debt Ratio, tree-sitter AST metrics, and SARIF 2.1.0 reports. Forbids the agent from writing functional code…

not rated 9 6mo ago A tokens not measured original MIT

safe-plugin

305

777genius/lintai

Plugin Cursor

Bundles 1 command · 0 tokens together

safe-plugin. Offline-first, precision-first security linter for SKILLS, MCP, plugins, configs and other AI infrastructure.

not rated 9 1mo ago A tokens not measured

servicenow-mcp-ai

306

IvanBBaev/servicenow-mcp-ai

Plugin Claude Code

Bundles 8 skills, 2 agents, 3 hooks, 1 MCP server · 572 tokens together

Drive ServiceNow from your AI assistant — 100 tools over the full REST surface, with plan-and-apply write safety, capability preflight, an ACL security scan, eight workflow skills (discover, triage, impact, drift, safe write, UI Builder review, upgrade review, security) and two read-only subagents (investigator…

not rated 8 changed 3d ago A tokens not measured original MIT

clouddrove

307

anmolnagpal/devops-skills

Plugin Claude Code

Bundles 19 skills, 2 hooks · 2,126 tokens together

Team DevOps review and scaffolding skills: Terraform (source and plan), Kubernetes/Helm, Docker, GitHub Actions, GitLab CI, Argo CD/Flux, AWS FinOps, OWASP and application security, observability, incident runbooks, deployment gating, and ADRs. Findings carry shared auditkit rule IDs.

not rated 8 3d ago A tokens not measured original MIT

idle-intel

308

demartinogiuseppe/idle-intel

Plugin Claude Code

Bundles 1 skill, 1 command · 133 tokens together

Turn Claude Code's wait-state status line into rotating micro-briefings about your project: security vulns, outdated deps, unpushed commits, stale branches, TODO/FIXME debt.

not rated 8 changed 24d ago A tokens not measured original MIT

polygraph

309

polygraphso/litmus

Plugin Claude Code

Bundles 1 skill, 2 commands, 1 MCP server · 258 tokens together

Grade and verify MCP servers A–F with the open polygraph litmus — tool-output injection, egress, sensitive-data, and adversarial-input checks. Bundles the polygraph skill, the polygraph-litmus MCP server, and /polygraph:grade · /polygraph:check.

not rated 8 3mo ago A tokens not measured original Apache-2.0

covenant-guard

310

open-covenant/covenant

Plugin Claude Code

Bundles 1 command, 1 hook · 17 tokens together

Run Claude Code unattended: cap the spend, sandbox execution, and get a signed receipt, enforced from outside the agent's own process by the covguard binary.

not rated 8 today A tokens not measured original Apache-2.0

geniro

311

geniro-io/geniro-claude-harness

Plugin Claude Code

Bundles 37 skills, 8 agents, 1 hook · 2,745 tokens together

Production-grade Claude Code harness with AI-driven setup, multi-agent skills, and session-restore hooks. Includes /setup for project-tailored configuration.

not rated 8 changed 2d ago A tokens not measured original Apache-2.0

commit

312

piiiico/proof-of-commitment

Plugin Claude Code

Bundles 1 hook

Supply chain gate for Claude Code. Intercepts npm, pip, cargo, and go installs — blocks CRITICAL packages before they run. Powered by getcommit.dev.

not rated 8 12d ago A tokens not measured original MIT