Security plugins

1,333 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 80fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

db

25

oracle/skills

Plugin Claude Code ✓ vendor

Bundles 2 skills · 260 tokens together

Oracle Database guidance for SQL, PL/SQL, SQLcl, ORDS, VECDB, administration, app development, performance, security, migrations, and agent-safe database workflows. Use when the user asks to write, edit, rewrite, review, format, debug, tune, or explain SQL; create or refactor PL/SQL; use SQLcl, Liquibase, ORDS, JDBC…

not rated 893 +14 changed 1mo ago A tokens not measured UPL-1.0

safety-hooks

26

poshan0126/dotclaude

Plugin Claude Code

Bundles 1 hook

Deterministic guardrails as PreToolUse hooks: blocks dangerous commands (force push, rm -rf, DROP TABLE), secret leaks, edits to protected files, and writes to build artifacts.

not rated 870 1mo ago C tokens not measured original MIT

iothackbot

27

BrownFineSecurity/iothackbot

Plugin Claude Code

Bundles 13 skills · 710 tokens together

IoT security testing toolkit with skills for firmware analysis, network reconnaissance, UEFI security, and device exploitation.

not rated 865 +7 4mo ago A tokens not measured original MIT

ship-safe

28

asamassekou10/ship-safe

Plugin Claude Code

Bundles 9 skills · 444 tokens together

Security audit your project with Ship Safe — 29 agents, 80+ attack classes, real-time Claude Code hooks, deep LLM analysis, and CI mode.

not rated 860 +3 yesterday A tokens not measured original MIT

Claude-BugHunter

30

Zyrexnn/Cybermes

Plugin Claude Code

Bundles 11 skills, 15 commands · 2,409 tokens together

82-skill bug-hunting & external red-team bundle for Claude Code — 57 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.

not rated 668 1mo ago A tokens not measured copy · 88% Apache-2.0

cti-expert

31

7onez/cti-expert

Plugin Claude Code

Bundles 1 skill, 9 commands, 2 hooks · 691 tokens together

Cyber threat intelligence and OSINT toolkit — structured investigations with sourced, trust-scored findings. Bundles the skill, the /cti command set, the typed intel MCP surface, and the RULE 1 / outbound-action safety hooks as one installable unit.

not rated 613 +5 changed 1mo ago A tokens not measured

semia

32

berabuddies/Semia

Plugin Claude Code

Bundles 1 skill · 47 tokens together

Representation Synthesis workflow for auditing agent skills in Claude Code.

not rated 612 1mo ago A tokens not measured original Apache-2.0

emilia-guard

33

emiliaprotocol/emilia-protocol

Plugin Claude Code

Bundles 1 hook

Require a named human's signed approval before Claude does anything irreversible — money movement, destructive shell, external sends. High-risk tool calls are held until a person approves on their own device (Face ID / passkey), producing an offline-verifiable Trust Receipt. Fail-closed.

not rated 611 +1 5d ago A tokens not measured original Apache-2.0

elastic-cloud

34

elastic/agent-skills

Plugin Claude Code ✓ vendor

Bundles 2 skills · 151 tokens together

Elastic Cloud skills - project setup, access management, network security, and Serverless project lifecycle.

not rated 594 +1 changed 1mo ago A tokens not measured original Apache-2.0

google-secops

37

google/mcp-security

Plugin Gemini CLI ✓ vendor

Essential Security Operations skills for Triage, Investigation, and Hunting.

not rated 535 +3 yesterday A tokens not measured original Apache-2.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 110 tokens together

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for…

not rated 516 +3 3mo ago A tokens not measured CC-BY-SA-4.0

dogwood

40

dogwood-policy/dogwood

Plugin Claude Code

Bundles 4 skills · 657 tokens together

Dogwood policy authoring tools for Claude Code. Bundles the autoformalize-policies skill, which turns a natural-language authorization requirement into a validated Dogwood (.dw) policy and checks it with the dogwood CLI.

not rated 489 +26 3d ago A tokens not measured original Apache-2.0

agentguard

42

GoPlusSecurity/agentguard

Plugin Claude Code

Bundles 1 skill, 3 hooks · 76 tokens together

GoPlus AgentGuard — AI agent security guard. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.

not rated 470 +3 today A tokens not measured original MIT

sponsio-claude-code

43

SponsioLabs/Sponsio

Plugin Claude Code

Bundles 1 skill, 1 hook · 263 tokens together

Runtime contract guardrails for every tool call in your Claude Code session — backed by per-plugin contract libraries under /.sponsio/plugins/.

not rated 455 +1 yesterday A tokens not measured original Apache-2.0

codeguard-security

45

project-codeguard/rules

Plugin Claude Code

Bundles 1 skill · 46 tokens together

Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.

not rated 425 +1 8mo ago A tokens not measured

ghost

46

ghostsecurity/skills

Plugin Claude Code

Bundles 7 skills · 587 tokens together

Enterprise grade AI-native application security scanning, validation, and remediation.

not rated 413 +2 changed 24d ago A tokens not measured original Apache-2.0

confide

47

glebis/claude-skills

Plugin Claude Code

Bundles 8 skills · 1,007 tokens together

CONFIDE — local-first de-identification toolkit for session transcripts. Skills: confide:setup (install deps + choose preferences), confide:anon (redact PII locally + emit a reversible map), confide:red (residual re-identification risk check), confide:rehydrate (restore real values into a cloud analysis locally)…

not rated 393 +2 yesterday A tokens not measured original MIT

offensive-claude

48

hypnguyen1209/offensive-claude

Plugin Claude Code

Bundles 38 skills, 18 commands, 8 agents, 2 hooks · 2,629 tokens together

Spec-driven offensive-security framework for Claude Code: 32 kill-chain skills, executable safety controls (scope/finding/OPSEC discipline), pattern-learning memory, and a bounded engagement engine — with a SessionStart dispatcher that enforces skill-invocation discipline.

not rated 392 +3 changed 19d ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: