1,334 tagged Security, measured the same way as everything else here.
Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45
Plugin Claude Code
Bundles 1 skill, 1 command, 1 agent · 166 tokens together
AI-powered security review of code changes via /stride-security-review:security-review — diff or full-repo scans with framework rule packs for web, mobile and CI/CD. Emits SARIF with severity gating for CI, plus a considerations mode that checks a task's securityconsiderations were mitigated.
broven/claude-permissions-plugin
Plugin Claude Code
Bundles 1 skill, 1 hook · 2 tokens together
Bash permission management for Claude Code: auto-approve compound commands, sync project permissions to global settings, and analyze permission logs to discover missing allow rules.
Nelsonochoam/nelsonochoam-claude-plugins
Plugin Claude Code
Bundles 1 skill · 0 tokens together
QA artifact generator — point it at a PR or give freeform instructions. Navigates the UI, captures screenshots, and stitches a GIF. Fully configurable auth and artifact storage via /.sentinel/config.json.
Plugin Claude Code
Bundles 1 skill · 106 tokens together
Runs real security scanners over code, full git history, dependencies, IaC and Supabase/Firebase row-level security, then verifies every finding against source before reporting.
Plugin Claude Code
Bundles 21 skills, 1 command · 1,557 tokens together
A persistent memory hub for Claude Code that loads into every session from any directory, plus a curated set of research and workflow skills.
UnboundCompute/security-agent-skills
Plugin Claude Code
Bundles 194 skills · 32,602 tokens together
Security-testing methodology as portable agent skills, spanning white-box bug hunting, AI-agent and LLM red-teaming, cloud identity and CI/CD trust, client-app trust surfaces across browser and editor extensions and Electron, wire-protocol and token trust across gRPC, WebSocket, and JWT, enterprise identity lifecycle…
Plugin Claude Code
Public-metadata domain intelligence for Microsoft 365 / Google Workspace tenant identification, email security observation (DMARC, DKIM, SPF, MTA-STS, BIMI), SaaS fingerprinting, certificate-transparency findings, and posture analysis. Bundles the recon MCP server and its usage guidance.
Plugin Claude Code
Bundles 1 skill · 65 tokens together
Claude Code skill for 1Password CLI — auth recovery, secret retrieval, SSH agent, git commit signing, shell plugins, service accounts, and troubleshooting.
curlysasha/claude-max-messenger-plugin
Plugin Claude Code
Bundles 2 skills, 1 MCP server · 101 tokens together
Max messenger channel for Claude Code — messaging bridge with built-in access control. Manage pairing, allowlists, and policy via /max:access.
pluginagentmarketplace/custom-plugin-backend
Plugin Claude Code
Bundles 12 skills, 4 commands, 8 agents · 816 tokens together
Production-grade backend development plugin with 8 specialized agents and 12 skills covering programming fundamentals, databases, APIs, architecture, caching, DevOps, security, and observability for Claude Code.
Plugin Claude Code
Bundles 1 skill · 80 tokens together
Let the agent use API keys and passwords to get work done without the plaintext ever entering the transcript. The agent references secrets as secret://vault/ and runs commands through secret-exec, which resolves the value downstream and scrubs it back out of the output.
Jandyoverseas977/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Bundles 1 skill · 165 tokens together
End-to-end FedRAMP authorization guidance — readiness assessments, SSP narratives, POA&M management, NIST 800-53 Rev 5 control mapping, and ConMon support.
Plugin Claude Code
Bundles 56 skills · 6,343 tokens together
Agent Skills for DevOps: 88 SKILL.md field guides spanning CI/CD, containers, Kubernetes, infrastructure as code, cloud, GitOps, observability, reliability, security, networking, data, platform engineering, automation, FinOps, and performance.
Plugin Claude Code
Bundles 2 commands, 1 hook · 27 tokens together
Agent-integrity for Claude Code: capture what your agent IS (Agent Manifest) and what it DID (TRACE), and check nothing was added or subtracted since your approved baseline.
Plugin Claude Code
Personal WhatsApp MCP server built directly on whatsmeow. Local-only Go bridge with SQLCipher-encrypted storage, Python FastMCP layer, Whisper voice-note transcription, accent-insensitive Spanish search, LID name resolution, vault-native CRM auto-injection, prompt-injection scrubbing, and mandatory draft+confirm on…
Plugin Claude Code
Bundles 9 skills · 1,476 tokens together
Kubernetes suite — Argo CD application authoring (GitOps Application/ApplicationSet manifests, sync policies, AppProjects), Helm chart authoring, KEDA event-driven autoscaling, Keycloak IAM (Operator + CRDs, realm/client configuration, OIDC/SAML integration, security hardening), OpenShift application packaging, and…
Plugin Claude Code
Bundles 7 skills · 720 tokens together
Build and consume MCP servers the right way. Server authoring, client integration, tool design, OAuth 2.1, transports, and security. 7 skills for the Model Context Protocol era.
Plugin Cursor
Tiered AI code-review: triage -> relevant specialist reviewers -> synthesis. Reviews AI-written code using AI agents.
Plugin Gemini CLI
A prompt-injection firewall for AI agents, with no AI inside: your agent reads anything and takes orders only from you. For Claude Code, Codex CLI, Kimi Code, DeepSeek Harness, Gemini CLI, MCP hosts and LangChain.
Plugin Claude Code
Bundles 1 command, 2 hooks · 19 tokens together
Know which of your MCP servers and dependencies are safe before Claude uses them. At your next session start, Claude opens with one line: how many of your servers AgentAvow checked, how many are Safe to connect, and the one to look at first, plus the same for your project's direct dependencies. Add a server with claud.
Plugin Cursor
Bundles 1 skill, 1 MCP server · 61 tokens together
Checks AI-written code against your rules as it is written, and keeps a record of what it found.
Plugin Claude Code
Bundles 1 skill, 5 hooks · 73 tokens together
Signed, offline-verifiable records of the permission decisions Claude Code makes about your agent's tool calls: auto-mode denials, calls that were asked about and then ran, and checks and consequential commands that ran without a prompt. Recalls recent denials at session start.
Plugin Claude Code
Bundles 3 skills · 94 tokens together
Vanta MCP server integration for Claude Code.
Plugin Claude Code
Bundles 1 skill · 130 tokens together
Sonatype Guide MCP server for software supply chain intelligence and dependency security analysis. Scan dependencies for vulnerabilities, get version recommendations, and check component quality metrics.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: