Security plugins

robzilla1738/roberts-skills

Plugin Claude Code

Bundles 3 skills, 4 commands · 418 tokens together

Offensive hotspot-driven hunt workflow for bugs, pain points, and inefficiencies — 13 analysis lenses, a zero-dependency toolkit (deterministic hotspots, structured findings, fingerprinted dedupe, baseline diffing, SARIF/HTML/markdown reports, CI exit codes), enforceable verification and coverage in CI, a fast…

vmware-skills/VMware-NSX-Security

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 186 tokens together

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

apiiro/mcp-server

Plugin Claude Code

Bundles 1 skill, 2 MCP servers · 76 tokens together

Agentic Application Security Platform (ASPM) for Claude Code. Prevents risk before code exists by rewriting prompts into secure prompts using each repository's Software Graph and organizational security and compliance policies. Run differential SAST, SCA, and Secrets scans and AutoFix risks directly from your IDE…

mcp-fortress/mcp-fortress

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 52 tokens together

MCP Fortress security scanning skill for Claude Code - scan MCP servers for vulnerabilities, prompt injection, and tool poisoning.

Zintellix/Claude-Skills

Plugin Claude Code

Bundles 1 skill · 138 tokens together

Multi-agent codebase audit skill for Claude Code — spawns parallel subagents (security, performance, tests, architecture, dead-code) and synthesizes their findings into a prioritized action plan.

tinoimammp/vantage-security-agent

Plugin Claude Code

Bundles 1 skill, 6 commands · 384 tokens together

Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…

akirtok/preflight-security-audit

Plugin Claude Code

Bundles 1 skill, 1 command, 6 agents · 979 tokens together

Comprehensive 360 pre-ship audit: 61 checks across security, reliability, performance, AI/LLM, privacy/compliance, and launch readiness — including live-database, serverless/edge, GraphQL, client-side, and modern-attack (Trojan Source) checks. Reports a 0–100 security score with severity-ranked findings and proposes…

owndiff/own-your-diff

Plugin Claude Code

Bundles 2 skills · 184 tokens together

Local ownership gate and multiple choice question approval skill for AI-assisted code diffs.

indykite/skills

Plugin Claude Code

Bundles 26 skills · 4,442 tokens together

IndyKite skills for coding agents — Agent Gateway deployment, MCP server calls, KBAC authorization policy authoring and lifecycle, AuthZEN decisions and search (single evaluation, batch evaluations, action / resource / subject search), runtime listing of a project's active KBAC policies, Capture API ingests and…

parousia8888/web-app-security-skill

Plugin Claude Code

Bundles 1 skill · 225 tokens together

Audit and harden authorized Web projects with explainable, reproducible evidence.

matterhornso/subscribetome

Plugin Claude Code

Bundles 5 commands, 4 hooks · 70 tokens together

AI API key & subscription manager. Out-of-band key entry, OS-keychain storage, and a PreToolUse hook that injects real keys into commands so the model only ever sees placeholders.

Wishmakingfairy/vibecheck

Plugin Claude Code

Bundles 4 skills, 1 agent, 1 hook · 239 tokens together

Stop shipping vulnerabilities. 156 automated security checks for Claude Code. Blocks exposed API keys, disabled Supabase RLS, missing rate limiting, open CORS, and 150+ more before they reach your codebase.

getaxonflow/axonflow-claude-plugin

Plugin Claude Code

Bundles 7 skills, 10 commands, 2 hooks, 1 MCP server · 459 tokens together

Policy enforcement, PII detection, and audit trails for Claude Code. Govern tool execution, scan outputs for sensitive data, and maintain compliance-grade records of every action.

agentmessaging/agent-identity

Plugin Claude Code

Bundles 1 skill · 82 tokens together

Authenticate AI agents with auth servers using the Agent Identity (AID) protocol. Ed25519 identity documents, proof of possession, and OAuth 2.0 token exchange.

ayalaphiscan/web-security-guard

Plugin Claude Code

Bundles 6 skills, 2 commands · 1,012 tokens together

Integrated security for websites and apps: hardening, secure authentication (email verification, 2FA, passkeys), payment privacy, attack-defense agent with lockdown, 4-layer Fortress architecture and automated GitHub security workflows. Bilingual skills (English + Italiano). | Sicurezza integrata per siti e app…

froggeric/claude-smart-approval

Plugin Claude Code

Bundles 1 hook

AI permission tier for Claude Code Bash commands: deny-list gate plus smart AI evaluation for unknown commands. Requires Claude Code >= 2.0.45, shfmt, jq (brew install shfmt jq).

techgangboss/agentstore

Plugin Claude Code

Bundles 1 skill · 70 tokens together

AI-powered code review that analyzes your code for bugs, security issues, and best practices.

camjac251/tool-gates

Plugin Claude Code

Bundles 2 skills · 460 tokens together

Intelligent permission gate for Claude Code shell, file, search, Skill, and MCP tool surfaces. AST-parses Bash commands, guards file reads/writes, and blocks configured tool invocations. Defers benign asks to CC's resolver so the prompt UI shows the 'Yes, and don't ask again for X' button, while keeping a deny floor…

2389-research/test-kitchen

Plugin Claude Code

Bundles 4 skills · 334 tokens together

Intercepts build/create/implement requests to offer parallel design exploration (omakase-off) and parallel implementation competition (cookoff) — runs multiple variants simultaneously and lets tests and the judge pick the winner.

esbmc/agent-marketplace

Plugin Claude Code

Bundles 1 skill, 2 commands · 272 tokens together

ESBMC software model checker integration for Claude Code - verify C, C++, Python, Solidity, and Java/Kotlin programs for bugs, memory safety, undefined behavior, and more.

cantinasec/plugins

Plugin Claude Code

Bundles 3 skills, 3 commands · 243 tokens together

Security tools from cantina.security.

casedone/claude-code-security-plugins

Plugin Claude Code

Bundles 1 skill, 1 agent · 552 tokens together

Automated security scanning (Bandit, Semgrep, Trivy, TruffleHog) and comprehensive static security review agent for Claude Code.

LeekJay/claude-skills-plugin

Plugin Claude Code

Bundles 1 skill, 1 agent · 191 tokens together

Review and redesign Python FastAPI backend project architecture, analyzing API design, data architecture, security, async performance, code organization, and testing. Use when backend architecture review, API design analysis, database optimization, security assessment, or architectural improvements are needed.

threatcl/claude-plugin

Plugin Claude Code

Bundles 1 skill, 5 commands, 1 MCP server · 154 tokens together

Threat modeling with Threatcl Cloud — bundles the threatcl skill, workflow slash commands, and the Threatcl Cloud MCP server.