1,334 tagged Security, measured the same way as everything else here.
Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 175 tokens together
MCP server and CLI for Tailscale: inspect and manage tailnet devices, routes, users, keys, DNS, and ACL policy over stdio or streamable HTTP.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 54 tokens together
A deterministic guardrail your coding agent runs on itself — structured findings on just the changed lines, before the code reaches disk. Zero LLM tokens, 0 false blocks.
RadOrigin-LLC/RAD-Claude-Skills
Plugin Claude Code
Bundles 1 skill · 172 tokens together
The specialist lanes and memory that the built-in /code-review doesn't have. Invokes the built-in engine for general bug-finding (quick/standard/deep map to its effort levels), then adds what it lacks: a mechanical hallucinated-imports validator (lockfile-verified across Python/JS/TS/Rust/Go, with a vendored denylist…
Plugin Claude Code
Bundles 4 skills, 8 hooks · 226 tokens together
A plugin for coding agents. They ship secure code. Steers the write and can ask or deny before a file is saved.
astrogilda/mcp-keyring-injector
Plugin Claude Code
Securely inject MCP API credentials from system keyring into Claude Code configuration at session start.
Plugin Claude Code
Bundles 1 skill · 95 tokens together
Scan codebases for hardcoded secrets, credentials, API keys, and common security vulnerabilities.
Meghshyams/Production-Readiness
Plugin Claude Code
Bundles 1 skill · 60 tokens together
Comprehensive production readiness audit — 75+ checks across 9 pillars: security & supply chain, visual QA, code quality, testing, error handling & observability, build, performance, accessibility (WCAG 2.2), and AI/LLM safety. Like having a senior engineer + QA tester do a final review before deploy.
xChechi/xche-ai-app-security-pack
Plugin Claude Code
Bundles 2 skills, 1 hook · 85 tokens together
Security guardrails for AI-built apps: OWASP/API/LLM/MCP rules applied while building, an /audit skill for full reviews, and a hook that blocks secret commits.
Plugin Claude Code
Security firewall + supply-chain verifier for Solana AI dev — gates transactions/deploys/secrets and verifies skills/MCPs.
allsmog/blackbox-claude-plugin
Plugin Claude Code
Bundles 17 skills, 11 commands, 9 agents · 2,590 tokens together
Black-box and grey-box penetration testing plugin for HackTheBox machine challenges. Provides automated reconnaissance, enumeration, exploitation guidance, and privilege escalation for Linux, Windows, and Active Directory environments.
error505/Flockion_AI_Engineering
Plugin Claude Code
Bundles 15 skills · 1,776 tokens together
Lazy senior engineer skills: write the least code that safely solves the real problem. Ships the engineering ladder plus product, architecture, agent, review, security, and cost skills.
Plugin Claude Code
Bundles 8 skills, 1 command, 1 hook · 557 tokens together
Security and compliance audit toolkit for any codebase: HIPAA, SOC 2, OWASP, PQC, FDCPA/TCPA, HITRUST.
Plugin Claude Code
Bundles 1 skill, 2 commands, 2 agents, 2 hooks · 219 tokens together
Cedar policy enforcement + Ed25519 signed receipts for Claude Code tool calls. First cryptographic-governance plugin.
Plugin Claude Code
Bundles 2 skills · 293 tokens together
OpenSIPs Skills: authoring and per-module reference for OpenSIPs SIP server configurations, plus security review across 12 vulnerability families.
Plugin Claude Code
Bundles 4 skills, 3 agents, 1 hook, 1 MCP server · 166 tokens together
AWS compliance engine — SOC 2 + HIPAA scanning, remediation, and audit reporting powered by Prowler.
Plugin Claude Code
Bundles 1 skill, 1 command, 1 hook · 109 tokens together
Security scanner for vibe-coded projects. Automatically scans for hardcoded secrets, SQL injection, XSS, and other vulnerabilities before commits.
Plugin Claude Code
Bundles 3 skills, 1 hook · 273 tokens together
Production-ready Claude Code skills for presentations, secrets management, and developer workflows. Built by Clear Function.
Plugin Claude Code
Decision-only outbound policy hook for AI coding agents. Gates git push, package publication, non-local HTTP mutations, and destructive shell commands before they happen. Local-first: no cloud, no telemetry.
Plugin Claude Code
Bundles 1 skill, 1 hook · 93 tokens together
PreToolUse hook — automatically validates Bash commands against a deny-by-default policy before execution.
Plugin Claude Code
A one-file PreToolUse door-guard that bounces destructive Bash commands (rm -rf, DROP TABLE, curl|sh, force-push, device wipes) before they run. Blocks 45/45 known footguns, 0 false positives.
Plugin Claude Code
Bundles 3 skills, 1 agent · 218 tokens together
INFYNON Package Security Manager — Universal secure package installation, CVE scanning, auto-fix, dependency auditing, and vulnerability monitoring across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, gem, composer, nuget, hex, pub).
Plugin Claude Code
Bundles 1 skill, 1 command · 77 tokens together
Security-focused differential review of code changes with git history analysis and blast radius estimation.
Plugin Claude Code
Bundles 10 skills, 10 commands, 1 agent, 1 hook · 604 tokens together
Harness Engineering for AI coding agents — CAR framework, security guardrails, quality gates, context monitoring, auto-formatters, trace logging, checkpoints, MCP validation.
Plugin Claude Code
Bundles 11 skills, 1 hook · 825 tokens together
Socratic lenses for software engineering: question batteries that examine your work from security, design, usability, test-quality, and operational-recovery perspectives — plus an orchestrator that surfaces caveats, rabbit holes, and blast radius before you build, and a memory loop that grows new lenses from your real.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: