Security plugins

1,333 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 80fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

owasp-security

49

agamm/claude-code-owasp

Plugin Claude Code

Bundles 1 skill · 109 tokens together

Security review and secure-coding skill covering OWASP Top 10:2025, ASVS 5.0, the OWASP LLM Top 10 (2026), and the OWASP Agentic Top 10 (2026).

not rated 382 +4 23d ago A tokens not measured original MIT

kesekit

50

cdppcorp/KESE-KIT

Plugin Claude Code

Bundles 8 skills · 1,025 tokens together

Security vulnerability assessment (EN/KO). CII infrastructure (560+), AI Security, Robot Security (IEC 62443), Space Security (satellite/GSaaS/supply chain, CMMC/NIS2), Secure Coding (JS/Python/Pseudo Code, 46 CWE). Use /kesekit-start, /kesekit-start-ko, /kesekit-check, /kesekit-fix, /kesekit-guide etc.

not rated 360 6mo ago A tokens not measured original MIT

codeguard-security

51

cosai-oasis/project-codeguard

Plugin Claude Code

Bundles 4 skills · 207 tokens together

Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.

not rated 353 +2 changed 18d ago A tokens not measured

ksafe

53

ioannisa/KSafe

Plugin Claude Code

Bundles 1 skill · 239 tokens together

Agent skill for the KSafe Kotlin Multiplatform encrypted persistence library — setup, usage patterns, anti-patterns, and debugging.

not rated 339 +1 14d ago A tokens not measured original Apache-2.0

sage

54

gendigitalinc/sage

Plugin Claude Code

Bundles 1 skill, 1 hook · 39 tokens together

Safety for Agents - Agent Detection & Response (ADR) for AI agents.

not rated 316 +4 changed 5d ago A tokens not measured original Apache-2.0

lacp-hardening

56

0xNyk/lacp

Plugin Claude Code

Bundles 3 skills, 1 command · 238 tokens together

Production hardening for AI coding agents — quality gates, security guards, continuous QA, and session memory. From the LACP (Local Agent Control Plane) framework.

not rated 306 +1 26d ago A tokens not measured original MIT

ethskills

57

austintgriffith/ethskills

Plugin Claude Code

Bundles 28 skills · 1,751 tokens together

Ethereum development skills — corrects LLM blind spots on gas costs, L2s, CROPS trust review (Censorship Resistance, Open Source and Free, Privacy, Security), DeFi protocols, security, and the current tool landscape.

not rated 294 +1 1mo ago A tokens not measured

cyber-neo

58

Hainrixz/cyber-neo

Plugin Claude Code

Bundles 1 skill · 123 tokens together

Open-source cybersecurity analysis agent. Scans any local project for vulnerabilities: code security (SAST), dependency CVEs (SCA), secret leaks, authentication/authorization flaws, cryptographic weaknesses, misconfigurations, supply chain risks, and CI/CD security. Covers all OWASP 2025 Top 10 and CWE Top 25…

not rated 289 +6 3mo ago A tokens not measured original MIT

ywh

59

yeswehack/claude-kit

Plugin Claude Code

Bundles 3 skills, 1 hook · 189 tokens together

Produce triager-grade YesWeHack reports instead of AI slop: always-on drafting discipline plus three on-demand skills (write, triage, gotchas).

not rated 273 +100 1mo ago A tokens not measured GPL-3.0

raptor-loop-hunt

60

dinosn/raptor-loop-hunt

Plugin Claude Code

Bundles 1 skill · 165 tokens together

Autonomous, looping, multi-altitude security vulnerability hunt for a codebase — the RAPTOR 'Karpathy auto-research' generate -> adversarially-judge -> verify loop that finds far more bugs than a single-pass scan.

not rated 266 +1 changed 1mo ago A tokens not measured original MIT

AgriciDaniel/claude-cybersecurity

Plugin Claude Code

Bundles 1 skill · 201 tokens together

AI-powered cybersecurity code review with 8 specialist agents, OWASP Top 10:2021, CWE Top 25:2024, MITRE ATT&CK v15, and framework-aware false-positive suppression.

not rated 231 +3 6mo ago A tokens not measured original MIT

gograph

63

ozgurcd/gograph

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 69 tokens together

Claude Code workflow guidance for local gograph: AST-aware call graphs, impact, security-flow candidates, and 61 query, analysis, and workflow capabilities through a separately registered MCP server.

not rated 229 8d ago A tokens not measured original MIT

auth-skills

64

better-auth/skills

Plugin Claude Code

Bundles 2 skills · 125 tokens together

Create and update auth layer for JavaScript/TypeScript projects.

not rated 222 +1 1mo ago A tokens not measured

SkillCompass

66

Evol-ai/SkillCompass

Plugin Claude Code

Bundles 1 skill, 14 commands, 3 hooks · 52 tokens together

Local-only skill quality and security evaluator for Claude Code/OpenClaw. Scores six dimensions, runs local validators, and stores reports and snapshots under .skill-compass/.

not rated 215 +1 5mo ago A tokens not measured original MIT

jwt

67

kataras/jwt

Plugin Claude Code

Bundles 2 skills · 266 tokens together

Development guide for the jwt JSON Web Token library for Go: signing and verifying tokens, claims and expiry, algorithm choice (HMAC/RSA/RSA-PSS/ECDSA/EdDSA), kid-based key rotation, JWKS fetch/refresh/publish, blocklisting and testing.

not rated 212 1mo ago A tokens not measured original MIT

Claude-AD

68

ADScanPro/Claude-AD

Plugin Claude Code

Bundles 8 skills, 3 commands, 3 agents · 1,497 tokens together

Claude Code skills, agents and commands for Active Directory penetration testing: recon, Kerberoasting, AS-REP roasting, ADCS ESC1-17, DCSync, ACL abuse, coercion/NTLM relay, delegation, attack-path reasoning, environment constraints, OPSEC telemetry and conceptual compliance mapping.

not rated 212 +2 1mo ago A tokens not measured original MIT

procoder

69

azrtydxb/procoder

Plugin Claude Code

Bundles 1 skill, 34 commands · 888 tokens together

A harness that gives AI coders the tools and skills to work like a senior developer. All nine domains shipped: security, best practices, maintainability, performance, documentation, clean code, CI/CD, DevOps, GitOps — plus the code index. Hooks hand the agent results; the agent stays in control.

not rated 211 changed yesterday A tokens not measured original Apache-2.0

greekr4/playwright-bot-bypass

Plugin Claude Code

Bundles 1 skill · 62 tokens together

Bypass bot detection using rebrowser-playwright (Node.js) or undetected-chromedriver (Python). Passes bot.sannysoft.com fingerprint checks and automates Google without triggering CAPTCHA. Authorized-use only — respect each site's ToS.

not rated 204 +2 1mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: