Security plugins

1,079 tagged Security, measured the same way as everything else here.

Browse within: compliance 69fedramp 48claude-ai 44ai-security 39gdpr 33appsec 31claude-plugin 31data-privacy 29cybersecurity 26devsecops 24claude-code-skills 23claude-code-skill 22ai-governance 19auditing 19

forge

457

gyuha/forge

Plugin Claude Code

Bundles 23 skills, 3 agents, 2 hooks · 2,311 tokens together

An agent-engineering workflow skill set (fg-) for Claude Code. Includes fg-security, a codebase security audit (methodology vendored from cloudflare/security-audit-skill, MIT) whose artefacts stay outside the repo and whose severity-gated findings become fix-forward plans. A development loop that takes one task throug.

4 4d ago A tokens not measured

offensive-recon

458

mahuttha/offensive-recon

Plugin Claude Code

Bundles 8 skills, 2 agents, 1 hook · 413 tokens together

Offensive reconnaissance plugin — 8 skills + 2 agents for multi-phase security reconnaissance and vulnerability assessment. Includes nmap, nikto, sqlmap, shodan, nuclei, subfinder, whatweb, and orchestrated recon pipeline. Bilingual Thai+English output.

4 6mo ago A tokens not measured original MIT

agent-secrets

459

zalan159/agent-secrets

Plugin Claude Code

Bundles 1 skill · 80 tokens together

Let the agent use API keys and passwords to get work done without the plaintext ever entering the transcript. The agent references secrets as secret://vault/ and runs commands through secret-exec, which resolves the value downstream and scrubs it back out of the output.

4 1mo ago A tokens not measured

ai-delivery-insight

460

shiftharness/AI-Delivery

Plugin Claude Code

Bundles 1 skill, 2 commands · 252 tokens together

Assess AI-assisted delivery capability against a security-gated checklist; compute a gamified 0-100 Insight Score with run-over-run deltas and generate a project-anchored learning plan plus a coach-style HTML+MD report.

4 2mo ago A tokens not measured

claudia

462

reganomalley/claudia

Plugin Claude Code

Bundles 10 skills, 12 commands, 5 hooks · 1,199 tokens together

Proactive technology mentor, security advisor, and prompt coach for Claude Code. Catches bad practices, advises on architecture decisions, and coaches better prompting.

4 6mo ago A tokens not measured original MIT

usap-skills

466

jaskaranhundal/usap-skills

Plugin Claude Code

Bundles 48 skills, 7 commands, 1 agent · 2,333 tokens together

Unified Security Agent Platform — 79 cybersecurity skills + 12 cs- orchestrator agents that emit a typed 11-field JSON output contract, mapped to MITRE ATT&CK and NIST CSF 2.0. Runs in any LLM. Bundles 7 slash commands (usap:run, usap:fortigate, usap:orchestrate, usap:challenge, usap:compare, usap:test, usap:README) a.

4 19d ago A tokens not measured original Apache-2.0

nightvision-skills

469

nvsecurity/nightvision-skills

Plugin Claude Code

Bundles 5 skills · 302 tokens together

Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs.

3 1mo ago A tokens not measured original Apache-2.0

ivuorinen/skills

Plugin Claude Code

Lists 1 plugin

Hostile audit toolkit for Claude Code: adversarial review, security, tests, docs, architecture, reliability and agent-enforcement audits, with a bundled MCP server.

3 3d ago A tokens not measured

ivuorinen-skills

472

ivuorinen/skills

Plugin Claude Code

Bundles 7 skills, 44 commands, 2 agents, 3 hooks, 1 MCP server · 640 tokens together

Nitpicker — hostile audit toolkit: /nitpicker dispatches specialist audit commands (adversarial review, security, tests, docs, types, architecture, perf, reliability, caching, concurrency, error handling, leaks, deps, licensing, CI, commits, migrations, observability, API contracts, a11y, i18n, privacy, confi.

3 3d ago A tokens not measured

deep-security-audit

473

ravindrakele/claude-skills

Plugin Claude Code

Bundles 1 skill · 174 tokens together

Multi-agent security audit that reads and understands code, adversarially verifies every finding, and scores honest CVSS 3.1. Read-only by default.

3 1mo ago A tokens not measured original MIT

engineer-flow

476

soden46/engineer-flow

Plugin Claude Code

Bundles 18 skills · 470 tokens together

Framework-agnostic engineering orchestrator with generalized capabilities, external Agent Skills, sparse routing, and mandatory security verification.

3 5d ago A tokens not measured original MIT

compliance-review

477

leodisa/compliance-review-skill

Plugin Claude Code

Bundles 1 skill · 238 tokens together

Build or review code for compliance with the EU AI Act, GDPR, the NIS2 Directive (EU 2022/2555), and secure-development (SSDLC) best practice. Three modes: repo gap analysis, compliance-by-design while coding, and data protection — the skill asks whether to pseudonymise (deterministic tokens, joins preserved) or…

3 1mo ago A tokens not measured original MIT

cybersorted

479

cyber-sorted/skills-pro

Plugin Claude Code

Bundles 1 skill · 417 tokens together

Full security and enterprise architecture advisory for CISOs, CTOs, CPOs, Security Architects, Security Engineers, Enterprise Architects, Secure Developers, and Penetration Testers.

3 6mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: