1,172 tagged Security, measured the same way as everything else here.
Browse within: compliance 70fedramp 49claude-ai 47ai-security 43gdpr 34appsec 32claude-plugin 31data-privacy 30cybersecurity 26devsecops 25claude-code-skills 23claude-code-hooks 22claude-code-skill 22ai-governance 19
Onome-AJ/security-sweep-plugin
Plugin Claude Code
Comprehensive security scanner for codebases — finds hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, and more. Covers OWASP Top 10, Mobile Top 10, and LLM Top 10.
Plugin Claude Code
Skills for developing on the Flow blockchain — covering Cadence language fundamentals, token standards, DeFi actions, security auditing, and project setup.
Plugin Claude Code
Session-aware shell guardrails for Claude Code backed by the Caushell runtime.
jassics/awesome-claude-security
Plugin Claude Code
Plugin marketplace listing 45 plugins: security-diagramming, security-reporting, security-integrations, security-knowledge, threat-modeling.
jassics/awesome-claude-security
Plugin Claude Code
Security for autonomous, tool-using AI agents: review, tool-permission audit, autonomy-boundary testing for excessive agency, MCP server trust review, agent harness/runtime testing, and agent-to-agent (A2A) protocol trust.
jassics/awesome-claude-security
Plugin Claude Code
AI safety engineer role bundle: build and operationalize safeguards (evals-in-CI, guardrails, monitoring, safety cases, RAI governance). Auto-installs the ai-safety stack.
Plugin Claude Code
Protect Python source before shipping it — obfuscate AND verify the output still runs. Wraps the pyobfus obfuscator (AST-based, framework-aware, AI-debuggable) and its MCP server.
Plugin Claude Code
Auto-obfuscates sensitive client data during pentesting so Claude never sees real PII, hostnames, or credentials.
Plugin Claude Code
Pulls context from Jira, Jenkins, ServiceNow, and a code repository, then runs an end-to-end threat model covering both conventional application/API systems and AI/ML/LLM infrastructure: data flow diagram, trust boundaries, threat actors, STRIDE threat register (optionally full 7-stage PASTA), AI/ML-specific threats…
Plugin Claude Code
Security-scan a Claude Code skill, plugin, or MCP server before installing it. SAFE / CAUTION / DANGEROUS verdict with file:line findings. Read-only, never executes the target.
Plugin Claude Code
Multi-agent verification system implementing organizational intelligence for production-grade code reliability. Achieves 92%+ accuracy through team-of-rivals architecture with specialized critic agents.
Plugin Claude Code
Auto-approve safe bash commands validated against safecmd's allowlist.
Plugin Claude Code
Complex fixture with commands, agents, hooks, MCP, LSP, and settings.
Plugin Claude Code
A docs-inspired plugin that bundles review skills, MCP servers, hooks, and a default security agent.
Plugin Claude Code
A set of shared development tools for reviewing local code changes and updating several AI command-line tools at once.
Plugin Claude Code
Offensive security skills collection for authorized penetration testing, CTF challenges, and security research. Includes tools for reconnaissance, exploitation, C2 frameworks, evasion, reverse engineering, and programming patterns.
lacework/forticnapp-llm-plugins
Plugin Claude Code
Fortinet Code Security — IaC and SCA scanning for Claude Code.
Plugin Claude Code
Blindfolds the LLM from your secrets. Stores API keys, tokens, and passwords in your OS keychain. The LLM works with placeholders, never sees actual values. Kernel-level sandbox enforcement on macOS.
Plugin Claude Code
Audits a code change against a 54-phase failure taxonomy and reports what it did not check, not just what it found. Domain overlays run first and force critical-path treatment.
Plugin Claude Code
MCP server and CLI for Tailscale: inspect and manage tailnet devices, routes, users, keys, DNS, and ACL policy over stdio or streamable HTTP.
Plugin Claude Code
A deterministic guardrail your coding agent runs on itself — structured findings on just the changed lines, before the code reaches disk. Zero LLM tokens, 0 false blocks.
RadOrigin-LLC/RAD-Claude-Skills
Plugin Claude Code
The specialist lanes and memory that the built-in /code-review doesn't have. Invokes the built-in engine for general bug-finding (quick/standard/deep map to its effort levels), then adds what it lacks: a mechanical hallucinated-imports validator (lockfile-verified across Python/JS/TS/Rust/Go, with a vendored denylist…
Plugin Claude Code
A plugin for coding agents. They ship secure code. Steers the write and can ask or deny before a file is saved.
pitimon/claude-cybersecurity-skill
Plugin Claude Code
Cybersecurity professional skills: 22 domains covering IR, DFIR, DevSecOps, SOC+SOAR, GitOps, Code Security, Container/Supply Chain, Threat Modeling, Compliance Frameworks, Cloud Security & CSPM, Zero Trust Architecture, AI/ML Security, API Security, Vulnerability Management, Threat Intelligence, Cross-Domain…