Security plugins

1,334 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

codebase-health

313

jeffrigby/somepulp-agents

Plugin Claude Code

Bundles 6 skills, 7 agents · 584 tokens together

Codebase health tools: deep audits via orchestrated specialists (security, performance, libraries, quality, dead code), safe dependency updates, dead-code cleanup, and documentation maintenance.

not rated 8 +1 changed 1mo ago A tokens not measured original MIT

cfgaudit

315

cfgaudit/cfgaudit

Plugin Claude Code

Bundles 3 skills, 2 hooks · 57 tokens together

Security scanner for AI-agent configuration files — detects prompt injection, dangerous permissions, and credential exposure in settings.json, CLAUDE.md, MCP configs, and more.

not rated 8 changed 5d ago A tokens not measured original Apache-2.0

sparda-gate

318

zakariagharzouli/sparda

Plugin Claude Code

Bundles 1 hook

The behavior gate for AI edits — proves each edit lost no auth guard, dropped no route, and grew no blast radius. Deterministic, <2s, offline, zero API key.

not rated 8 1mo ago A tokens not measured

snyk-api-web

319

snyk/saw-mcp

Plugin Cursor

Bundles 2 skills, 2 MCP servers · 146 tokens together

Snyk API & Web MCP Server — onboard scan targets, configure authentication, run DAST scans, and triage findings through natural language. Built on FastMCP 2.0.

not rated 8 9d ago A tokens not measured original Apache-2.0

claude-code-plugins

320

PagerDuty/claude-code-plugins

Plugin Claude Code

Bundles 2 commands · 27 tokens together

A collection of Claude Code plugins developed by PagerDuty for pre-commit risk assessment and PagerDuty skill creation for AI agents (Early Access).

not rated 7 5mo ago A tokens not measured original Apache-2.0

tech-debt-mcp

321

PierreJanineh/TechDebtMCP

Plugin Claude Code

Bundles 1 skill, 3 commands · 108 tokens together

Static technical-debt analysis across 14 languages, exposed as MCP tools and resources (SQALE ratings, debt summaries, custom rules, dependency vulnerabilities).

not rated 7 2mo ago A tokens not measured original MIT

dependency-guard

323

yongquantan/dependency-guard

Plugin Claude Code

Bundles 1 skill, 1 command, 2 hooks · 0 tokens together

A dependency security plugin for Claude Code. DepGuard intercepts package installs, checks reputation with Socket.dev, runs installs in a Modal sandbox, and blocks suspicious behavior before it reaches your machine.

not rated 7 6mo ago A tokens not measured original MIT

knox

324

QORIS-AI/knox

Plugin Claude Code

Bundles 8 skills, 11 hooks · 147 tokens together

Security enforcement layer for Claude Code. Blocks dangerous commands, audits every tool call, detects prompt injection.

not rated 7 2mo ago A tokens not measured

attach-guard

325

attach-dev/attach-guard

Plugin Claude Code

Bundles 1 skill, 1 hook · 50 tokens together

Supply-chain security guard that intercepts package install commands across npm, pnpm, pip, go, and cargo ecosystems and enforces package risk policies before execution.

not rated 7 4mo ago A tokens not measured original MIT

code-copilot-team

327

gosha70/code-copilot-team

Plugin Claude Code

Bundles 24 skills · 747 tokens together

Code Copilot Team: 24 skills, 14 agents, 14 commands and the SDD templates, plus hooks for file protection, git safety, auto-format, type verification, test-on-stop, context re-injection and notifications. Generated from the same sources as setup.sh; always-loaded rules, the launcher and the peer-review hooks need…

not rated 7 changed 27d ago A tokens not measured original MIT

code-coherence

328

reggiechan74/cc-plugins

Plugin Claude Code

Bundles 5 skills, 7 agents · 542 tokens together

Multi-agent verification system implementing organizational intelligence for production-grade code reliability. Achieves 92%+ accuracy through team-of-rivals architecture with specialized critic agents.

not rated 7 5mo ago A tokens not measured original MIT

cc-safe-setup

329

yurukusa/cc-safe-setup

Plugin Claude Code

Bundles 2 skills, 1 hook · 107 tokens together

909 safety hooks for Claude Code — prevent file deletion, credential leaks, git disasters, and token waste during autonomous AI coding sessions.

not rated 7 23d ago A tokens not measured original MIT

llm-redact

331

asanderson/llm-redact

Plugin Claude Code

Bundles 11 commands, 1 hook · 214 tokens together

llm-redact proxy control: status, live traffic, sessions, redaction preview, routing and spend, audit verification, and guarded config editing as slash commands.

not rated 7 changed 3d ago A tokens not measured AGPL-3.0

clerk-setup

332

Harmeet10000/skills

Plugin Claude Code

Bundles 1 skill · 19 tokens together

Add Clerk authentication to any project by following the official quickstart guides.

not rated 7 5mo ago A tokens not measured original MIT

jfrog

333

jfrog/cursor-plugin

Plugin Cursor

Bundles 7 skills · 1,020 tokens together

JFrog Platform integration with MCP, security skills, Agent Package Resolution, supply-chain best practices, and JFrog Agent Guard governance for adding, removing, and listing MCP servers.

not rated 7 changed 25d ago A tokens not measured original Apache-2.0

draugr

334

draugr-dev/draugr

Plugin Claude Code

Bundles 1 hook

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

not rated 7 changed today A tokens not measured original Apache-2.0

jfrog

335

jfrog/claude-plugin

Plugin Claude Code

Bundles 7 skills, 4 hooks, 1 MCP server · 1,020 tokens together

Official JFrog plugin. Connect Claude Code to JFrog to manage, secure, and govern your software supply chain. Give agents the context to build secure, compliant software.

not rated 6 changed 20d ago A tokens not measured original Apache-2.0

Vimalk0703/shipworthy

Plugin Claude Code

Lists 1 plugin

Vibe coding is how you start; engineering is what keeps it alive. Auto-activating Claude Code plugin that silently installs production engineering guardrails — architecture awareness, TDD, quality gates, security-first development, and 25+ skills so vibe coders build real systems without thinking about process.

not rated 6 6mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: