Security plugins

2,171 tagged Security, measured the same way as everything else here.

Browse within: ai-security 84compliance 55appsec 51claude-ai 45claude-plugin 44devsecops 39claude-code-skills 38claude-code-skill 35fedramp 34agent-security 31claude-code-plugins 31cybersecurity 30AI Safety 28code-quality 27

better-t-stack

25

AmanVarshney01/create-better-t-stack

Plugin Claude Code

Let your AI scaffold and extend projects with Better-T-Stack. Bundles the create-better-t-stack MCP server plus skills, commands, and an agent so the assistant plans a valid stack and generates it instead of hand-rolling boilerplate.

5.7k 2d ago A tokens not measured original MIT

claude-octopus

26

nyldn/claude-octopus

Plugin Claude Code

v10.0.0 — Truthful execution, guided diagnostics, safe recovery, and eval-backed routing. Run /octo:setup.

4.0k 2d ago A tokens not measured original MIT

Claude-BugHunter

28

elementalsouls/Claude-BugHunter

Plugin Claude Code

83-skill bug-hunting & external red-team bundle for Claude Code — 58 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.

3.9k 2d ago A tokens not measured original MIT

microsoft/skills

Plugin Claude Code

Kusto graph analysis, IRQL security hunting pipelines, and graph visualization skills for Azure Data Explorer.

3.0k +4 yesterday A tokens not measured original MIT

shiro-attack2

30

SummerSec/ShiroAttack2

Plugin Claude Code

A command-line security tool for testing Apache Shiro applications affected by the Shiro-550 remember-me deserialization vulnerability, also known as CVE-2016-4437. Deserialization is the process of turning stored data back into objects, which can be unsafe when untrusted data is accepted.

2.6k 2mo ago A tokens not measured original MIT

ShiroAttack2

31

SummerSec/ShiroAttack2

Plugin Claude Code

A security testing tool for Apache Shiro, a Java framework used for user login and access control. It covers Shiro-550 vulnerability testing, including key guessing, gadget-chain detection, command execution, memory-shell injection, and key changes.

2.6k 2mo ago A tokens not measured original MIT

aws/agent-toolkit-for-aws

Plugin Claude Code

Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.

2.5k 3d ago A tokens not measured original Apache-2.0

jwx-v4

33

lestrrat-go/jwx

Plugin Claude Code

Plugin marketplace listing 1 plugin: jwx-dev-v4.

2.4k 5d ago A tokens not measured original MIT

jwx-dev-v4

34

lestrrat-go/jwx

Plugin Claude Code

Guide for developing Go applications with github.com/lestrrat-go/jwx v4 — parse and sign JWTs, work with JWS/JWE/JWK, pick algorithms, and avoid common footguns.

2.4k 5d ago A tokens not measured original MIT

agent-skill-creator

35

FrancyJGLisboa/agent-skill-creator

Plugin Claude Code

Skill factory: describe a workflow in plain English and receive a validated, security-scanned cross-platform agent skill with evals and an installer.

2.4k 4d ago A tokens not measured original MIT

pr-review

36

lhfer/claude-howto-zh-cn

Plugin Claude Code

Complete PR review workflow with security, testing, and docs.

2.3k 26d ago A tokens not measured copy · 100% MIT

pentest-ai-agents

37

0xSteph/pentest-ai-agents

Plugin Claude Code

Marketplace for pentest-ai-agents — specialist Claude Code subagents for authorized penetration testing.

2.2k 16d ago A tokens not measured original MIT

pentest-ai-agents

38

0xSteph/pentest-ai-agents

Plugin Claude Code

52 specialist subagents for authorized penetration testing and red team engagements — recon, web/API, Active Directory, cloud, mobile, wireless, exploitation, post-exploitation, detection, forensics, and reporting.

2.2k 16d ago A tokens not measured original MIT

xu-xiang/everything-claude-code-zh

Plugin Claude Code

Battle-tested Claude Code configurations from an Anthropic hackathon winner — agents, skills, hooks, commands, and rules evolved over 10+ months of intensive daily use.

1.9k 6mo ago A tokens not measured original MIT

xu-xiang/everything-claude-code-zh

Plugin Claude Code

Complete collection of battle-tested Claude Code configs from an Anthropic hackathon winner - agents, skills, hooks, and rules evolved over 10+ months of intensive daily use.

1.9k 6mo ago A tokens not measured original MIT

claude-hooks

41

doobidoo/mcp-memory-service

Plugin Claude Code

Automatic memory capture and injection for Claude Code via MCP Memory Service.

1.9k 4d ago A tokens not measured original Apache-2.0

stripe

42

stripe/ai

Plugin Claude Code

Stripe development plugin for Claude.

1.8k +4 2d ago A tokens not measured original MIT

wooyun-legacy

43

tanweai/wooyun-legacy

Plugin Claude Code

WooYun business logic vulnerability methodology — security testing skill based on 22,132 real vulnerability cases covering 6 domains and 33 vulnerability classes.

1.8k 1mo ago A tokens not measured

cc-safety-net

45

kenryu42/cc-safety-net

Plugin Claude Code

Block destructive commands and secret access.

1.5k changed yesterday A tokens not measured original MIT

azure-skills

46

microsoft/azure-skills

Plugin Claude Code

Plugin marketplace listing 2 plugins: azure, azure-kusto-graph-skills.

1.4k 6d ago A tokens not measured original MIT

microsoft/azure-skills

Plugin Claude Code

Kusto graph analysis, IRQL security hunting pipelines, and graph visualization skills for Azure Data Explorer.

1.4k 6d ago A tokens not measured copy · 100% MIT

atmos

48

cloudposse/atmos

Plugin Claude Code

Atmos skills for AI coding assistants: Terraform/OpenTofu/Helmfile/Packer/Ansible orchestration, stacks, remote imports, components, immutable vendoring and Component Updater PRs, containers, emulators, Native CI, SBOM provenance, Atmos Pro, Auth, GitOps, secrets, cache, hooks, shared steps, workflows, version tracks.

1.4k +2 today A tokens not measured original Apache-2.0