Security plugins

dtkmn/mcp-zap-server

Plugin Claude Code

Bundles 1 skill · 60 tokens together

Guided Docker Compose setup for local MCP ZAP Server in Codex, Cursor or Claude Code.

NuGuardAI/nuguard

Plugin Claude Code

Bundles 2 skills, 1 agent, 1 plugin · 591 tokens together

AI application security for Claude — generate an AI Bill of Materials (AI-SBOM), run static analysis, behavioral validation, and adversarial red-team testing for AI agents and LLM-powered applications.

hashicorp/vault-mcp-server

Plugin Gemini CLI ✓ vendor

MCP configuration declaring 1 server: vault.

califio/skills

Plugin Claude Code

Bundles 1 skill, 1 command · 268 tokens together

Audit PHP engine deserialization surface (unserialize, session decoders, WDDX, phar metadata, custom ce->unserialize handlers) for UAF, type confusion, partial-object destruct, signed-length heap overflow, and parse inconsistency.

sysdig/skills

Plugin Claude Code

Bundles 8 skills · 1,216 tokens together

Sysdig's cloud security expertise, packaged as agent skills that work natively in your AI environment.

open-agent-ai-security/praxen

Plugin Claude Code

Bundles 1 skill · 184 tokens together

Praxen — agent behavior verifier. Compares an AI agent's declared policy (Worker Remit) against the available evidence — source code, live deployment state, or behavioral artifacts — and reports where observed behavior diverges from declared intent. Make sure your agent does its job — and only its job.

Servosity/msp-skills

Plugin Claude Code

Bundles 1 skill · 229 tokens together

Capture, store, wire, and verify a browser-session credential for sites that issue no API key and no OAuth: httpOnly session cookies, opaque localStorage bearer tokens, and custom auth headers. One DevTools Copy as cURL paste is the only human step; extraction, storage in the Windows Credential Manager or macOS…

kastelldev/kastell

Plugin Claude Code

Bundles 1 skill, 1 plugin · 92 tokens together

Server security auditing, hardening, and fleet management. Runtime-derived audit catalog, CIS/PCI-DSS/HIPAA compliance, production hardening workflows, and first-party MCP tools. Supports Hetzner, DigitalOcean, Vultr, Linode with Coolify, Dokploy, and bare VPS modes.

solanabr/auditor-skill

Plugin Claude Code

Bundles 1 skill, 15 commands, 8 agents · 1,800 tokens together

Solana + full-stack security auditor: 20 checklists / 1,424 items / 137 known-vectors, severity 1-10, scope-gated loading. A full audit-firm lifecycle (automated + interactive), executable PoC + fix-patch delivery, a Rust pre-scanner + cross-audit memory for token efficiency, native rigor gates (context reconstruction.

Institut-du-Numerique-Responsable/green-claude

Plugin Claude Code

Bundles 1 skill · 125 tokens together

Éco-conception de services numériques (RGESN 2024 / GR491 / Green Software Foundation) appliquée pendant que Claude Code écrit ou revoit du code, avec un audit déterministe et des pratiques d'usage responsable maintenues par le projet. Présentation : https://institut-du-numerique-responsable.github.io/green-claude/.

alpha-omega-security/threat-model

Plugin Claude Code

Bundles 8 skills · 1,074 tokens together

Produce threat models for open-source projects: the security contract between a project and its users, structured for downstream integrators and vulnerability triagers.

thrashr888/agentkernel

Plugin Claude Code

Bundles 1 skill, 1 command · 61 tokens together

Execute commands in isolated Docker/Podman containers for security. Auto-detects runtime for Python, Node, Rust, Go, Ruby, and more.

eth0izzle/security-skills

Plugin Claude Code

Bundles 2 skills · 240 tokens together

Create, validate, import, execute, and export CrowdStrike Falcon Fusion SOAR workflows using natural language.

trustabl/trustabl

Plugin Claude Code

Bundles 2 skills, 1 agent, 1 hook, 1 MCP server · 310 tokens together

Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills (trustabl-scan and trustabl-enrich) and a subagent (trustabl) that together form a scan → enrich…

ByamB4/find-cve-agent

Plugin Claude Code

Bundles 21 skills, 7 commands, 5 agents · 1,048 tokens together

CVE hunting harness for open source security research. A 5-agent team that systematically finds, validates, and reports real vulnerabilities in open source packages.

humaidhahm/opencode-pentester

Plugin Claude Code

Bundles 1 skill, 12 agents · 464 tokens together

Full penetration testing framework - 69 attack categories across 16 domains covering OWASP, injection, authentication, cloud, and more.

killvxk/cybersecurity-skills-zh

Plugin Claude Code

Bundles 58 skills · 4,355 tokens together

A Chinese-language collection of more than 734 cybersecurity skills covering areas such as web security, penetration testing, digital forensics, threat intelligence, cloud security, and malware analysis.

RedHatProductSecurity/prodsec-skills

Plugin Claude Code

Lists 2 plugins

Plugin marketplace listing 2 plugins: prodsec-skills, prodsec-skills-ge-core.

orcasecurity/orca-skills

Plugin Claude Code

Bundles 20 skills, 1 plugin · 1,881 tokens together

Skills and plugins to accelerate security workflows with the Orca Cloud Platform.

brunobracaioli/claude-code-starter-pack

Plugin Claude Code

Bundles 4 skills, 2 hooks · 193 tokens together

Starter pack B2 Tech: hooks de segurança, skills de code review e security audit. Pensado para projetos novos com stack Python/Flask + Next.js/TS em GCP.

assafkip/huntkit

Plugin Claude Code

Bundles 3 skills, 22 commands, 2 hooks · 400 tokens together

Investigation toolkit for Claude Code. Case management, OSINT, structured analytic techniques (Heuer / CIA tradecraft primer), chain-of-custody evidence capture, and bundled MCP servers for infrastructure recon and threat intel.

gl0bal01/malware-analysis-claude-skills

Plugin Claude Code

Bundles 6 skills · 453 tokens together

Agentic malware analysis: Claude runs the static tooling, parses exported VM evidence, writes and tests detection rules, and drafts the report across triage, dynamic analysis, specialized file analysis, detection engineering, and reporting.

hackenproof-public/skills

Plugin Claude Code

Bundles 1 skill · 114 tokens together

Export all reports of a HackenProof program into a structured file (Markdown, JSON, or CSV — user's choice).

turingmindai/turingmind-code-review

Plugin Claude Code

Bundles 2 commands, 1 agent · 28 tokens together

AI-powered code review for uncommitted local changes. Catches bugs, security vulnerabilities, and CLAUDE.md compliance issues.