Security plugins

1,333 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 80fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

narsil

74

postrv/narsil-mcp

Plugin Claude Code

Bundles 1 skill, 5 commands · 100 tokens together

Code intelligence plugin for narsil-mcp. Provides guidance for using 90 code analysis tools including security scanning, call graph analysis, symbol search, supply-chain SBOM, and SPARQL/CCG knowledge graph export.

not rated 185 +1 10d ago A tokens not measured original Apache-2.0

grc

75

mlunato47/claude-grc-plugin

Plugin Claude Code

Bundles 1 skill, 24 commands · 378 tokens together

GRC (Governance, Risk, and Compliance) domain knowledge — frameworks, controls, audits, evidence, ConMon, cross-framework mappings, document review, and operational workflows. Cloud-agnostic.

not rated 184 changed 17d ago A tokens not measured original MIT

production-grade

76

nagisanzenin/production-grade

Plugin Claude Code

Bundles 14 skills, 2 hooks · 690 tokens together

Enhances Claude Code from producing raw code into delivering production-ready systems. 14 specialized agents handle architecture, tested code, security audit, CI/CD, and documentation. Use for building apps/websites/services, adding features, hardening, deployment, testing, review, or architecture design.

not rated 181 1mo ago A tokens not measured

chrono-vault

77

mtarcure/claude-vibe-squad

Plugin Claude Code

Bundles 3 skills · 182 tokens together

Chrono squad memory: private off-repo markdown source of truth with disposable FTS5/BM25 recall, fail-closed root resolution, and per-lane sensitivity clearance.

not rated 165 27d ago A tokens not measured original MIT

appsec-workflow

78

seqra/opentaint

Plugin Claude Code

Bundles 16 skills · 517 tokens together

Find application-specific vulnerabilities with whole-program static taint analysis and write rules and dependency models for future scans.

not rated 164 +1 today A tokens not measured original Apache-2.0

secskills-core

79

trilwu/secskills

Plugin Claude Code

Bundles 30 skills · 2,881 tokens together

The reverse-engineering and code-audit foundation both sides share. 30 dual-use security skills: native and Go/Rust/.NET/iOS/firmware reverse engineering, packers, and Flutter/React Native/Unity/Xamarin runtimes; source-code auditing with PHP-specific depth; webshell and backdoor hunting; multi-agent…

not rated 164 +7 1mo ago A tokens not measured original MIT

clean-room

81

AlexZio00/sovereign-skills

Plugin Claude Code

Bundles 1 skill · 85 tokens together

Carves safety-adjacent requests into a safe scope, executed by a genuinely isolated fresh-context subagent, with an adversarial verify pass and a descope ledger.

not rated 140 9d ago A tokens not measured original MIT

defender

83

quillai-network/quillshield_skills

Plugin Claude Code

Bundles 1 skill · 50 tokens together

Blue-team release-gate skill for smart contract systems. Classifies projects, reviews deployment and upgrade execution paths, inspects CI/CD and dependency trust boundaries, evaluates signer/admin operational security, and produces evidence-based release blockers, warnings, and release verdicts.

not rated 129 +1 6mo ago A tokens not measured original MIT

sc-auditor

84

Archethect/sc-auditor

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 35 tokens together

AI-powered smart contract security auditor with parallel hunt lanes, Devil's Advocate verification, static analysis (Slither, Aderyn), fuzz testing (Echidna, Medusa), symbolic execution (Halmos), Solodit intelligence, and interactive Map-Hunt-Attack methodology.

not rated 127 7mo ago A tokens not measured

ultraship

86

Houseofmvps/ultraship

Plugin Claude Code

Bundles 45 skills, 16 commands, 13 agents, 3 hooks, 2 MCP servers · 2,579 tokens together

Claude Code plugin — 41 tools, 45 skills, 13 agents. Currency Guard keeps Claude on current docs, not stale training data. Elite SEO strategy with AI traffic tracking, IndexNow, GSC-GA4 cross-reference, CTR anomalies, brand filtering, keyword intelligence, index doctor, codebase index, pentest, ship, launch, grow…

not rated 123 3mo ago A tokens not measured original MIT

ethicore-guardian

87

OraclesTech/guardian-sdk

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 78 tokens together

Runtime AI-threat screening for Claude: analyze prompts, scan tool calls and outputs, and vet documents before you act, with BLOCK / CHALLENGE / ALLOW verdicts. Paid feature — needs a Pro-plan-or-higher Guardian API key.

not rated 123 +1 yesterday A tokens not measured

privacy-scanner

88

maluta/privacy-scanner

Plugin Claude Code

Bundles 1 skill · 123 tokens together

Scan WiFi networks to detect hidden cameras and surveillance devices in rental accommodations.

not rated 122 +61 6mo ago A tokens not measured original Apache-2.0

skills-janitor

89

khendzel/skills-janitor

Plugin Claude Code

Bundles 6 skills · 365 tokens together

6 skill hygiene tools: health report, auto-fix + prune, value (honest token split + usage), security scan (prompt injection + malicious patterns), discover (search + precheck), swipe (interactive triage).

not rated 122 18d ago A tokens not measured original MIT

Auth0

90

auth0/auth0-mcp-server

Plugin Gemini CLI ✓ vendor

Manage your Auth0 tenants, apps and APIs.

not rated 122 3d ago A tokens not measured original MIT

harness-skills

91

harness/harness-skills

Plugin Cursor

Bundles 71 skills · 8,963 tokens together

All 71 Harness skills in one plugin: pipelines, deployments, access control, feature flags and experimentation, database, platform, security, observability and AI agents.

not rated 120 +5 3d ago A tokens not measured original Apache-2.0

magpie

94

apache/magpie

Plugin Claude Code ✓ vendor

Bundles 1 skill, 12 plugins · 131 tokens together

Apache Magpie — a reusable, governance-agnostic framework of agentic skills for maintaining open-source projects: release management, security triage, PR and issue workflows, contributor growth, and repo health.

not rated 119 +5 changed yesterday A tokens not measured original Apache-2.0

dwmetz/MalChela

Plugin Claude Code

MalChela — A YARA & Malware Analysis Toolkit with Claude MCP integration for DFIR analysts.

not rated 117 18d ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: