1,334 tagged Security, measured the same way as everything else here.
Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45
Zyoffsec/airtight-secure-coding
Plugin Claude Code
Bundles 1 skill, 1 hook · 63 tokens together
Secure-coding gates for AI-written code. 70 numbered gates mapped to OWASP Top 10 and CWE, plus a pre-write guard that denies the failures it can prove: open routes, IDOR, missing CSRF tokens, interpolated queries and shell commands, raw HTML sinks, unverified webhooks, any-origin CORS with credentials, passwords…
Plugin Claude Code
Bundles 3 skills, 2 hooks, 2 MCP servers · 36 tokens together
Auto-obfuscates sensitive client data during pentesting so Claude never sees real PII, hostnames, or credentials.
Plugin Claude Code
Bundles 1 skill, 4 MCP servers · 346 tokens together
Pulls context from Jira, Jenkins, ServiceNow, and a code repository, then runs an end-to-end threat model covering both conventional application/API systems and AI/ML/LLM infrastructure: data flow diagram, trust boundaries, threat actors, STRIDE threat register (optionally full 7-stage PASTA), AI/ML-specific threats…
Plugin Claude Code
Bundles 3 skills, 1 hook · 205 tokens together
Security-scan a Claude Code skill, plugin, or MCP server before installing it. SAFE / CAUTION / DANGEROUS verdict with file:line findings. Read-only, never executes the target.
Plugin Claude Code
Bundles 120 skills · 9,711 tokens together
Offensive security skills collection for authorized penetration testing, CTF challenges, and security research. Includes tools for reconnaissance, exploitation, C2 frameworks, evasion, reverse engineering, and programming patterns.
lacework/forticnapp-llm-plugins
Plugin Claude Code
Bundles 3 skills, 4 hooks · 65 tokens together
Fortinet Code Security — IaC and SCA scanning for Claude Code.
Plugin Claude Code
Bundles 1 skill, 2 hooks · 55 tokens together
Blindfolds the LLM from your secrets. Stores API keys, tokens, and passwords in your OS keychain. The LLM works with placeholders, never sees actual values. Kernel-level sandbox enforcement on macOS.
pitimon/claude-cybersecurity-skill
Plugin Claude Code
Bundles 1 skill · 215 tokens together
Professional cybersecurity skill: 22 domains covering IR, DFIR, DevSecOps, SOC+SOAR, GitOps, Code Security, Container/Supply Chain, Threat Modeling, Compliance Frameworks, Cloud Security & CSPM, Zero Trust Architecture, AI/ML Security, API Security, Vulnerability Management, Threat Intelligence, Cross-Domain…
Plugin Claude Code
Bundles 1 skill, 2 hooks, 1 MCP server · 118 tokens together
SWAG reverse proxy configuration management via MCP. Create, edit, view, and manage nginx proxy configurations with auth integration.
2389-research/fresh-eyes-review
Plugin Claude Code
Bundles 1 skill · 83 tokens together
Mandatory final sanity check before commits/PRs - catches security vulnerabilities, logic errors, and bugs that slip through tests.
Plugin Claude Code
Bundles 1 skill · 160 tokens together
Adversarial, attacker-minded security review of untrusted code before you install it. A read-only scanner plus a five-persona reasoning pass, ending in a GO / GO-WITH-MITIGATIONS / NO-GO verdict.
Plugin Claude Code
Bundles 1 skill · 133 tokens together
Audits a code change against a 54-phase failure taxonomy and reports what it did not check, not just what it found. Domain overlays run first and force critical-path treatment.
ayuksel-tenb/tenable-attack-mapper
Plugin Claude Code
Bundles 1 skill, 1 agent · 149 tokens together
Map Tenable Security Center findings to MITRE ATT&CK techniques and export a VPR-scored ATT&CK Navigator layer.
Plugin Claude Code
Bundles 7 commands, 3 hooks · 100 tokens together
Sandbox every Bash tool call through binpash/try. Review the accumulated diff after the session and commit or discard.
Plugin Claude Code
Bundles 4 skills, 1 MCP server · 90 tokens together
Notepad++ automation MCP server - tool-awareness session injection.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 87 tokens together
Use the husk security scanner from Claude Code. Adds the husk MCP server (scan results, findings, packages, remediations, fresh scans) and a skill covering the husk CLI and MCP output.
Plugin Claude Code
Bundles 23 skills, 3 agents, 2 hooks · 3,116 tokens together
An agent-engineering workflow skill set (fg-) for Claude Code. Includes fg-security, a codebase security audit (methodology vendored from cloudflare/security-audit-skill, MIT) whose artefacts stay outside the repo and whose severity-gated findings become fix-forward plans, and fg-debug, a conversational diagnosis disc.
Plugin Claude Code
Bundles 6 skills, 2 agents, 2 hooks · 484 tokens together
Automated security auditing CLI for AI agent code. Scan repos, packages, and agent tooling for malicious patterns with quarantine-first workflow.
Plugin Cursor
Bundles 1 skill · 71 tokens together
Independent, signed pre-action verdicts for agent tool calls and merges — a neutral second opinion before an irreversible action, with a recomputable proof after, via invinoveritas's official remote MCP server.
Plugin Claude Code
Bundles 1 skill · 59 tokens together
Seal that a WebAuthn-authed human participated and attested an exact payload. Outsiders can verify the receipt without trusting your DB.
Plugin Gemini CLI
Security MCP for vibe coding. 604 rules, 39 tools for Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.
Plugin Claude Code
Bundles 9 skills, 4 agents, 3 hooks · 558 tokens together
Durable project state, evidence-backed "done", and gates enforced by hooks. Eight commands and four agents.
Plugin Claude Code
Bundles 2 skills, 5 hooks · 41 tokens together
Session-aware shell guardrails for Claude Code backed by the Caushell runtime.
Plugin Claude Code
Auto-approve safe bash commands validated against safecmd's allowlist.