Security plugins

1,079 tagged Security, measured the same way as everything else here.

Browse within: compliance 69fedramp 48claude-ai 44ai-security 39gdpr 33appsec 31claude-plugin 31data-privacy 29cybersecurity 26devsecops 24claude-code-skills 23claude-code-skill 22ai-governance 19auditing 19

trai

410

binpash/trai

Plugin Claude Code

Bundles 7 commands, 3 hooks · 100 tokens together

Sandbox every Bash tool call through binpash/try. Review the accumulated diff after the session and commit or discard.

5 3mo ago A tokens not measured original MIT

sonatype-guide

414

sonatype/guide-claude-plugin

Plugin Claude Code

Bundles 1 skill · 130 tokens together

Sonatype Guide MCP server for software supply chain intelligence and dependency security analysis. Scan dependencies for vulnerabilities, get version recommendations, and check component quality metrics.

4 5mo ago A tokens not measured

apiiro-guardian-agent

416

apiiro/mcp-server

Plugin Claude Code

Bundles 1 skill, 2 MCP servers · 76 tokens together

Agentic Application Security Platform (ASPM) for Claude Code. Prevents risk before code exists by rewriting prompts into secure prompts using each repository's Software Graph and organizational security and compliance policies. Run differential SAST, SCA, and Secrets scans and AutoFix risks directly from your IDE…

4 2mo ago A tokens not measured original Apache-2.0

husk

417

husk-security/husk

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 87 tokens together

Use the husk security scanner from Claude Code. Adds the husk MCP server (scan results, findings, packages, remediations, fresh scans) and a skill covering the husk CLI and MCP output.

4 5d ago A tokens not measured original MIT

vantage

420

tinoimammp/vantage-security-agent

Plugin Claude Code

Bundles 1 skill, 6 commands · 384 tokens together

Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…

4 1mo ago A tokens not measured original MIT

akirtok/preflight-security-audit

Plugin Claude Code

Bundles 1 skill, 1 command, 6 agents · 979 tokens together

Comprehensive 360 pre-ship audit: 61 checks across security, reliability, performance, AI/LLM, privacy/compliance, and launch readiness — including live-database, serverless/edge, GraphQL, client-side, and modern-attack (Trojan Source) checks. Reports a 0–100 security score with severity-ranked findings and proposes…

4 1mo ago A tokens not measured original MIT

security-audit

422

cdmx-in/security-review

Plugin Claude Code

Bundles 1 skill · 106 tokens together

Runs real security scanners over code, full git history, dependencies, IaC and Supabase/Firebase row-level security, then verifies every finding against source before reporting.

4 26d ago A tokens not measured original MIT

jarvis-os

423

ManceRayder42/jarvis-os

Plugin Claude Code

Bundles 9 skills, 1 command · 818 tokens together

A persistent memory hub for Claude Code that loads into every session from any directory, plus a curated set of research and workflow skills.

4 6d ago A tokens not measured original MIT

owndiff

424

owndiff/own-your-diff

Plugin Claude Code

Bundles 2 skills · 184 tokens together

Local ownership gate and multiple choice question approval skill for AI-assisted code diffs.

4 1mo ago A tokens not measured original MIT

security-agent-skills

425

UnboundCompute/security-agent-skills

Plugin Claude Code

Bundles 58 skills · 9,771 tokens together

Security-testing methodology as portable agent skills, spanning white-box bug hunting, AI-agent and LLM red-teaming, cloud identity and CI/CD trust, client-app trust surfaces across browser and editor extensions and Electron, wire-protocol and token trust across gRPC, WebSocket, and JWT, infrastructure-as-code and…

4 4d ago A tokens not measured original MIT

indykite-skills

427

indykite/skills

Plugin Claude Code

Bundles 23 skills · 3,636 tokens together

IndyKite skills for coding agents — Agent Gateway deployment, MCP server calls, KBAC authorization policy authoring and lifecycle, AuthZEN decisions and search (single evaluation, batch evaluations, action / resource / subject search), Capture API ingests and deletes (nodes, relationships, properties, property…

4 2d ago A tokens not measured original Apache-2.0

maestro-skills

429

ddtcorex/maestro-skills

Plugin Claude Code

Bundles 32 skills · 2,242 tokens together

Maestro Skills Hub & Cordis Plugin -- Magento 2 (architecture, linting, performance, security), Govard dev-environment orchestration, and the superpowers process-skills library (forked from obra/superpowers).

4 3d ago A tokens not measured original MIT

stm

430

matterhornso/subscribetome

Plugin Claude Code

Bundles 4 commands, 4 hooks · 53 tokens together

AI API key & subscription manager. Out-of-band key entry, OS-keychain storage, and a PreToolUse hook that injects real keys into commands so the model only ever sees placeholders.

4 11d ago A tokens not measured original MIT

vibecheck

431

Wishmakingfairy/vibecheck

Plugin Claude Code

Bundles 4 skills, 1 agent, 1 hook · 239 tokens together

Stop shipping vulnerabilities. 156 automated security checks for Claude Code. Blocks exposed API keys, disabled Supabase RLS, missing rate limiting, open CORS, and 150+ more before they reach your codebase.

4 5mo ago A tokens not measured original MIT