1,133 tagged Security, measured the same way as everything else here.
Browse within: claude-code-plugin 228compliance 94agentic-ai 82fedramp 70claude-ai 50ai-tools 47skills 45ai-security 44agents 38auditing 37cmmc 37gdpr 36mcp-server 35data-privacy 33
odere-pro/claude-aws-architect
Plugin Claude Code
Bundles 15 skills, 4 commands, 5 agents, 6 MCP servers · 1,920 tokens together
Claude Code plugin for AWS Well-Architected SDLC: design, IaC, cost, security, and observability with grounded citations to AWS docs.
Plugin Claude Code
Three hooks, no agents. A stated test result must reproduce, a fabricated import never reaches disk, and every command's real output is recorded. Active in every project the moment it is installed.
Plugin Claude Code
Bundles 1 skill · 47 tokens together
Fetch latest hacker/AI/security/tech RSS news and summarise in Traditional Chinese.
Plugin Claude Code
Bundles 12 skills, 2 commands, 1 agent · 932 tokens together
AI agent security for Claude Code — read the code, break the running agent, prove it (exploit-validated). Commands: /static-scan, /red-team. Subagent: agent-red-teamer. Skills: RT-1..RT-9.
Plugin Claude Code
Bundles 1 skill, 2 agents · 137 tokens together
Deep white-box OSWE-style web app security audit via /oswe:audit (PHP, Node.js, Python, Java, .NET) — Markdown + visual HTML reports. By Laucked Security.
didvc/claude-email-leak-notice
Plugin Claude Code
Claude Code injects your account email into session context, where an agent may reuse it as a legitimate value and commit it. This warns once per session when a personal address appears in a tool payload. Never blocks.
Plugin Claude Code
Automatic tool-call review for Claude Code. A local encoder scores every proposed tool call before it runs, approving safe work and blocking dangerous calls with an explanation the agent can act on.
pr3m/claude-code-bash-smart-approve
Plugin Claude Code
Bundles 8 skills, 1 hook · 428 tokens together
Auto-approves Claude Code Bash commands via AST-based allowlist. Handles pipes, subshells, compound commands, and env-var prefixes that literal Bash(...) prefix rules can't match.
Plugin Claude Code
Bundles 1 skill, 4 commands, 1 hook · 151 tokens together
Auto-detects API keys and secrets in your prompts, saves them to chmod-600 files in /.claude/secrets/, blocks the original prompt, and re-submits a sanitized version via OS-level paste automation. Cross-platform (macOS, Linux, Windows). Zero-friction secret hygiene for Claude Code.
makigjuro/cloudstack-ai-plugins
Plugin Claude Code
Bundles 7 skills, 1 agent · 339 tokens together
Terraform + Helm infrastructure scaffolding, linting, and review — module scaffolding, chart templates, validation pipelines, security scanning (trivy), and infrastructure-specific code review.
Plugin Claude Code
Bundles 28 skills, 40 agents, 3 hooks · 3,361 tokens together
AI development team environment. TDD workflow, security audit, pattern learning, and phase-boundary compaction.
Plugin Claude Code
Bundles 1 skill · 151 tokens together
Audit a private git repo's full history (every branch, tag, and PR ref) for secrets and PII before making it public, then carry out the cleanup.
Plugin Claude Code
Bundles 3 skills, 1 command, 18 agents · 940 tokens together
Local pentest sandbox for black-box, greybox, and white-box security audits inside a per-engagement Kali Docker container.
joshuafuller/claude-spill-scrub
Plugin Claude Code
Bundles 1 skill · 102 tokens together
Find and scrub credentials that leaked into Claude Code's own local logs. Scan is read-only, scrub is gated, and every run ends on a rotation checklist.
Plugin Claude Code
Context-aware safety guard for Claude Code tool calls.
OnyxynO/plugin-claude-npm-bun-guard
Plugin Claude Code
Modèle de garde-fou d'installation npm/bun : refuse les paquets malveillants connus (arbre transitif inclus) et met en quarantaine les versions publiées depuis moins de 3 jours.
AndrewDongminYoo/cc-agents-kit
Plugin Claude Code
Eight defensive hooks: blocks recursive rm on $HOME, download-and-execute pipelines, secrets-file access, path-less formatter runs, credentials in the staged diff, and the two zsh quoting mistakes that fail silently; warns on stale lockfiles and shellcheck findings; masks credential-shaped values out of Bash output…
Plugin Claude Code
Bundles 1 skill, 5 agents · 170 tokens together
Evidence-first source security scan workflow for human-written and AI-generated code.
Plugin Claude Code
Bundles 1 skill · 99 tokens together
Check MCP servers against the PolicyLayer registry before connecting to them.
Plugin Claude Code
Bundles 4 skills, 1 MCP server · 267 tokens together
Red-team scanning for LLM agents — integrate Vector in your repo, harden against findings, generate agent profiles.
Plugin Claude Code
Bundles 1 command · 59 tokens together
Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production.
Plugin Claude Code
Bundles 1 skill, 1 command, 1 MCP server · 109 tokens together
Turn Claude Code into an EU AI Act governance assistant: a deterministic, cited risk classifier (Digital Omnibus timeline, NIST AI RMF / ISO 42001 / ALTAI crosswalks) with 21 report generators — risk assessment, DPIA, FRIA, Annex IV, conformity tracker, AI security, data governance, forensic readiness, governance…
Plugin Claude Code
AI-powered security audit with real-time CWE data and npm audit.
Plugin Claude Code
Bundles 5 skills · 76 tokens together
Agent sidecar proxy — policy enforcement, tracing, and approval for AI agents.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: