Security plugins

1,333 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 80fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

sail

98

pillar-labs/sail-skill

Plugin Claude Code

Bundles 1 skill, 4 commands · 318 tokens together

Apply the SAIL V2 (Secure AI Lifecycle) framework by Pillar Security to secure AI applications and agents — gap analyses, security roadmaps, maturity assessments, compliance checklists, control prioritization, and vendor RFPs. Grounded in the full 91-risk SAIL catalog.

not rated 113 3mo ago A tokens not measured

sonarqube

99

SonarSource/sonarqube-agent-plugins

Plugin Claude Code

Bundles 10 skills, 1 agent · 453 tokens together

SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.

not rated 112 +1 changed 1mo ago A tokens not measured

accesslint

100

AccessLint/skills

Plugin Claude Code

Bundles 5 skills, 1 MCP server · 900 tokens together

Web accessibility (a11y) skills for Claude Code: audit a site for WCAG 2.2 conformance, scan a page with the rule engine, run hands-on keyboard and screen-reader checks, fix violations, and catch regressions in CI.

not rated 107 +2 1mo ago A tokens not measured

squirrelscan

101

squirrelscan/skills

Plugin Claude Code

Bundles 2 skills, 1 MCP server · 233 tokens together

Website QA tool built for coding agents (Claude Code, Cursor). 300+ rules across SEO, performance, security, accessibility & agent experience: audit from the CLI, fix findings in code, publish reports, and connect over MCP.

not rated 101 +3 changed 6d ago A tokens not measured original MIT

launchworthy

102

Wunderlandmedia/launchworthy

Plugin Claude Code

Bundles 1 skill · 161 tokens together

Production readiness audit for apps built with AI coding tools. Detects your stack, audits 5 domains, and produces a scored punch list with copy-paste fixes.

not rated 95 +2 changed 17d ago A tokens not measured original MIT

webhook-skills

103

hookdeck/webhook-skills

Plugin Claude Code

Bundles 41 skills · 2,180 tokens together

Bundle of all webhook integration skills in this repo: 33 provider skills (Stripe, Shopify, GitHub, and 30 others) for verifying signatures and handling provider-specific events, framework-agnostic webhook handler patterns covering idempotency, error handling and retries, three Hookdeck infrastructure skills for the…

not rated 92 +2 yesterday A tokens not measured original MIT

stealthy-auto-browse

104

psyb0t/docker-stealthy-auto-browse

Plugin Claude Code

Bundles 1 skill · 52 tokens together

Headless-detection-resistant browser automation in Docker: Camoufox stealth browser, human-like OS-level input via PyAutoGUI, HTTP API and MCP server, for authorized QA and defensive security testing.

not rated 91 +2 changed 7d ago A tokens not measured WTFPL

insecure-defaults

106

FlorianBruniaux/starmapper

Plugin Claude Code

Bundles 1 skill · 48 tokens together

Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production.

not rated 90 +2 7d ago A tokens not measured

clerk

107

clerk/skills

Plugin Claude Code

Bundles 22 skills, 1 MCP server · 1,553 tokens together

Add authentication and user management with Clerk. Skills for setup, framework patterns, organizations, billing, webhooks, and testing, plus the Clerk MCP server.

not rated 89 +1 yesterday A tokens not measured

envault

108

MildyNora/envault

Plugin Claude Code

Bundles 1 skill, 1 hook · 81 tokens together

Secrets vault workflow for agents: aliases and ciphers only, never plaintext. Pairs with the envault CLI.

not rated 87 +1 1mo ago A tokens not measured original MIT

tyran

109

jjanczur/tyran

Plugin Claude Code

Bundles 15 skills, 5 agents, 5 hooks · 1,196 tokens together

A task conductor for Claude Code: multi-agent orchestration with an enforced evidence contract, repo-specific learning, and update-safe local evolution.

not rated 81 changed 22d ago A tokens not measured original Apache-2.0

fort

111

djadmin/fort

Plugin Claude Code

Bundles 1 skill, 3 commands · 181 tokens together

Audit your Mac's security posture from Claude Code, understand what each finding means and why it matters, then fix what's safe. Drives the fort CLI over your shell and remediates only what you approve. Read-only by default. Findings map to SOC 2 / ISO 27001 / NIST / CIS when you need audit evidence.

not rated 80 3mo ago A tokens not measured original MIT

phoenix-prd-pipeline

112

Security-Phoenix-demo/security-skills-claude-code

Plugin Claude Code

Bundles 13 skills · 2,210 tokens together

Security-first specification pipeline. prd-generator writes a full PRD with a threat model from a plain-language feature description. The 12 phoenix- roles run the same pipeline stage by stage: context curation, scope, constraints, RFC 2119 requirements, ambiguity hunting, threat model, API contracts, verification mat.

not rated 80 6d ago A tokens not measured original MIT

network-ai

113

Jovancoding/Network-AI

Plugin Gemini CLI

Multi-agent coordination layer for Gemini CLI — atomic shared blackboard (propose/validate/commit), permission gating with HMAC/Ed25519-signed tokens, federated token-budget tracking, and append-only audit-log queries over MCP.

not rated 78 changed today A tokens not measured original MIT

cybersec-toolkit

114

26zl/cybersec-toolkit

Plugin Claude Code

Bundles 197 skills, 2 hooks, 1 MCP server · 12,682 tokens together

872 on-demand security skills for CTF, pentest, bug bounty, DFIR, detection engineering, cloud, identity, and red/blue team work. Skills are plain Markdown and activate by task without permanently consuming context. Bundles vendored skills under mixed licenses (MIT, Apache-2.0, CC-BY-SA-4.0) — see per-source…

not rated 76 +6 changed 2d ago A tokens not measured original MIT

lgpd-skills

115

goul4rt/lgpd-skills

Plugin Claude Code

Bundles 19 skills · 2,167 tokens together

Conjunto modular e orquestrado de skills para Claude que cobre, ponta-a-ponta, conformidade com a LGPD (Lei 13.709/2018), resoluções da ANPD aplicáveis e o ECA Digital (Lei 15.211/2025). Inclui 1 skill maestro (lgpd-audit) que orquestra 18 sub-skills especializadas: base legal, mapeamento de dados, ROPA, RIPD…

not rated 74 +2 4mo ago A tokens not measured original MIT

harness-engineering

118

jrenaldi79/harness-engineering

Plugin Claude Code

Bundles 2 skills, 1 hook, 1 plugin · 129 tokens together

Analyze and enforce best practices for AI coding agent projects. Assess codebase readiness across 8 pillars with /readiness, then scaffold enforcement with /setup: TDD, secret scanning, file size limits, auto-generated docs, and git hooks.

not rated 69 changed 11d ago A tokens not measured original MIT

remnawave-xray

119

Case211/skill-remnawave-xray

Plugin Claude Code

Bundles 1 skill · 110 tokens together

Remnawave + Xray Reality/Vision + Caddy selfsteal + mihomo — reference, config generation, diagnostics.

not rated 68 +3 2mo ago A tokens not measured AGPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: