1,079 tagged Security, measured the same way as everything else here.
Browse within: compliance 69fedramp 48claude-ai 44ai-security 39gdpr 33appsec 31claude-plugin 31data-privacy 29cybersecurity 26devsecops 24claude-code-skills 23claude-code-skill 22ai-governance 19auditing 19
PacktPublishing/The-Claude-Code-Operating-Model
Plugin Claude Code
Bundles 1 skill, 1 command, 1 agent · 59 tokens together
Team standardized development toolkit: security scanning, review commands, and a dangerous-command guard.
Plugin Claude Code
Bundles 8 skills, 1 command, 1 hook · 594 tokens together
Security and compliance audit toolkit for any codebase: HIPAA, SOC 2, OWASP, PQC, FDCPA/TCPA, HITRUST.
Plugin Claude Code
Bundles 1 skill, 2 commands, 2 agents, 2 hooks · 219 tokens together
Cedar policy enforcement + Ed25519 signed receipts for Claude Code tool calls. First cryptographic-governance plugin.
Plugin Claude Code
Bundles 28 skills, 13 commands, 10 agents, 5 hooks, 1 MCP server · 2,546 tokens together
AI codes fast. Raven enforces Discipline — Strategic Thinking, Scalable Structure, Security at Source. A plan attacked from three angles before any edit, approved by you; every prompt routed to the right one of 61 specialists, never silently; and local guards that block secrets, vulnerable libraries, and edits until…
dmaynor/dmaynor-skills-marketplace
Plugin Claude Code
Bundles 1 skill · 206 tokens together
Systematic audit methodology for wireless driver control-frame and Information Element (IE) parsing across Linux kernel drivers and equivalents. Use when: (1) auditing a vendor's WLAN driver for memory-safety bugs in beacon/probe-resp/assoc-frame parsing, (2) hunting for cross-vendor bug-class propagation (idioms copy.
dmaynor/dmaynor-skills-marketplace
Plugin Claude Code
Bundles 1 skill · 228 tokens together
Cross-driver audit methodology for protocol-multiplex state machines in wireless drivers (Wi-Fi 7 EMLSR/MLSR, Wi-Fi Direct, NAN, TDLS, FTM, AWDL-class). Identifies the multiplex primitive each vendor uses to time-share one radio across multiple links/protocols, enumerates state-transition surfaces, and hunts the…
Plugin Claude Code
OpenSIPs Agent Skills for Claude Code: route script authoring, per-module reference, and security review across 12 vulnerability families.
Plugin Claude Code
Bundles 2 skills · 293 tokens together
OpenSIPs Skills: authoring and per-module reference for OpenSIPs SIP server configurations, plus security review across 12 vulnerability families.
Plugin Claude Code
Bundles 4 skills, 3 agents, 1 hook, 1 MCP server · 166 tokens together
AWS compliance engine — SOC 2 + HIPAA scanning, remediation, and audit reporting powered by Prowler.
Plugin Claude Code
Bundles 1 skill, 1 command, 1 hook · 109 tokens together
Security scanner for vibe-coded projects. Automatically scans for hardcoded secrets, SQL injection, XSS, and other vulnerabilities before commits.
zhangguangzhi001-bot/ai-project-guard
Plugin Claude Code
Bundles 3 skills · 174 tokens together
CLI-first project governance toolkit for legacy codebases. Provides Claude Code skills that guide use of the AI Project Guard CLI to initialize CLAUDE.md, architecture context, dangerous-module guards, lessons, and risk-based workflows.
Plugin Claude Code
Bundles 3 skills, 1 hook · 273 tokens together
Production-ready Claude Code skills for presentations, secrets management, and developer workflows. Built by Clear Function.
Plugin Claude Code
Outbound change control for AI coding agents. Gates git push, npm publish, docker push, gh release, non-local HTTP mutations, and rm -rf before they happen, against a bundled policy, with Ed25519-signed audit receipts. Local-first: no cloud, no telemetry.
Plugin Claude Code
PreToolUse hook — automatically validates Bash commands against a deny-by-default policy before execution.
Plugin Claude Code
A one-file PreToolUse door-guard that bounces destructive Bash commands (rm -rf, DROP TABLE, curl|sh, force-push, device wipes) before they run. Blocks 45/45 known footguns, 0 false positives.
Plugin Claude Code
Bundles 3 skills, 1 agent · 218 tokens together
INFYNON Package Security Manager — Universal secure package installation, CVE scanning, auto-fix, dependency auditing, and vulnerability monitoring across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, gem, composer, nuget, hex, pub).
Plugin Claude Code
Bundles 1 skill, 1 agent · 96 tokens together
INFYNON Weave — AI-driven node-based API flow testing with TUI visualization, security probes, assertion engine, variable threading, and automated flow building. Test entire API surfaces as directed graphs with infynon weave.
Plugin Claude Code
Bundles 1 skill, 1 command · 77 tokens together
Security-focused differential review of code changes with git history analysis and blast radius estimation.
Plugin Claude Code
Security-verified agent skills marketplace. Every skill scanned for prompt injection, data exfiltration, and destructive operations.
Plugin Claude Code
Bundles 10 skills, 10 commands, 1 agent, 1 hook · 604 tokens together
Harness Engineering for AI coding agents — CAR framework, security guardrails, quality gates, context monitoring, auto-formatters, trace logging, checkpoints, MCP validation.
Plugin Claude Code
Expert AI assistants for NextDNS configuration, API integration, CLI management, and network-wide deployments.
Plugin Claude Code
Bundles 11 skills, 1 hook · 825 tokens together
Socratic lenses for software engineering: question batteries that examine your work from security, design, usability, test-quality, and operational-recovery perspectives — plus an orchestrator that surfaces caveats, rabbit holes, and blast radius before you build, and a memory loop that grows new lenses from your real.
Plugin Claude Code
Bundles 1 skill, 27 commands, 1 agent · 451 tokens together
GRC (Governance, Risk, and Compliance) domain knowledge — frameworks, controls, audits, evidence, ConMon, cross-framework mappings, document review, and operational workflows. Cloud-agnostic.
Plugin Claude Code
Bundles 1 skill, 1 command, 1 agent · 661 tokens together
AI-powered security review for code changes via the /stride-security-review:security-review slash command. Two scan modes (diff / --full), seven framework rule packs (Android/Kotlin, Django/Python, Express/Node.js, iOS/Swift, Phoenix/Elixir, Rails/Ruby, React/Next.js) covering the full mobile + web + Node ecosystem…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: