Security plugins

zscaler/zscaler-mcp-server

Plugin Claude Code

Bundles 42 skills, 20 commands, 1 MCP server · 5,761 tokens together

Manage Zscaler cloud security platform including ZPA (private access), ZIA (internet access), ZDX (digital experience), ZCC (client connector), EASM (attack surface), and Z-Insights (analytics). Create and manage policies, troubleshoot connectivity, audit security configurations, and investigate incidents across the…

DeepBitsTechnology/claude-plugins

Plugin Claude Code

Bundles 2 skills, 7 commands, 1 agent, 1 MCP server · 445 tokens together

Local cyber security assistant for PC issue detection, malware analysis, and system scanning.

WYRE-AI/msp-claude-plugins

Plugin Claude Code

Bundles 3 skills, 3 commands, 3 agents · 537 tokens together

Cross-vendor security awareness operations — training completion tracking, phishing simulation results, and per-user risk scoring across whatever security-awareness training tools you have connected. Complements secops-pack's technical threat response with the human-layer prevention side.

netresearch/security-audit-skill

Plugin Claude Code

Bundles 1 skill, 1 hook · 61 tokens together

Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 41 reference guides, PreToolUse warnings. By Netresearch.

sandraschi/windows-computer-use-mcp

Plugin Claude Code

Bundles 2 skills · 60 tokens together

Windows desktop automation (pywinauto) - window, element, input, OCR and mission tools.

workos/skills

Plugin Claude Code

Bundles 2 skills · 317 tokens together

Set up WorkOS AuthKit with no account: npx workos@latest install provisions an environment you can claim later. Also covers SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.

Aurite-ai/agent-verifier

Plugin Claude Code

Bundles 5 skills · 218 tokens together

Verifies AI agent code before it ships: hardcoded secrets, unbounded loops and retries, hallucinated tool references, oversized prompts, and language-specific quality checks. No telemetry.

smorky850612/Aurakit

Plugin Claude Code

Bundles 3 skills, 23 agents · 1,077 tokens together

All-in-one Claude Code skill: build, fix, review, deploy with one /aura command. 46 modes, 23 agents, 6-layer security (OWASP+), 10 hooks, 8 languages, 55% token savings.

dotclaude/marketplace

Plugin Claude Code

Bundles 4 commands, 5 agents · 169 tokens together

Backend development with security-first approach. Master REST/GraphQL APIs, OWASP security, LLM integration, authentication systems, and secure coding practices.

syncable-dev/syncable-cli

Plugin Claude Code

Bundles 11 skills · 388 tokens together

Syncable CLI skills for project analysis, security scanning, vulnerability detection, dependency auditing, IaC validation, Kubernetes optimization, and cloud deployment.

christopherkarani/ryk

Plugin Claude Code

Bundles 5 skills · 0 tokens together

ryk safety hooks and skills for Claude Code.

bridge-mind/BridgeWard

Plugin Claude Code

Bundles 2 skills, 1 agent · 379 tokens together

Skeptical-reading and prompt-injection defense for AI coding agents. Trust nothing. Ship safely.

winmin/kernel-vuln-analyzer

Plugin Claude Code

Bundles 1 skill · 130 tokens together

Analyze Linux kernel vulnerabilities from KASAN/UBSAN/BUG crash logs or CVE descriptions. Full root cause analysis, exploitability assessment, patch development, and QEMU verification.

himself65/auth-spec

Plugin Claude Code

Bundles 2 skills · 93 tokens together

Auth skills for Claude Code — scaffold hand-rolled auth endpoints and audit auth code against security best practices.

danoszz/penthera

Plugin Claude Code

Bundles 1 skill · 118 tokens together

Find and fix security issues in vibecoded apps. Scan a live URL, a local repo, or your macOS machine for TLS, headers, auth, secrets, IDOR/OAuth, and injection issues, then apply framework-aware fixes and re-scan to verify. Mapped to OWASP with SARIF output. Runs as a skill or CLI. Authorized testing only.

Prismer-AI/signet

Plugin Claude Code

Bundles 1 skill, 1 hook · 16 tokens together

Cryptographic signing for every AI agent tool call — Ed25519 receipts + hash-chained audit log.

wildcard/caro

Plugin Claude Code

Lists 1 plugin

Generate safe, POSIX-compliant shell commands using Caro's LLM-powered command generation with comprehensive safety validation. Integrates seamlessly into Claude Code workflows.

railyard-dev/railguard

Plugin Claude Code

Bundles 3 hooks

A secure runtime for Claude Code. Intercepts every tool call with policy-based allow/block/ask decisions, evasion detection, path fencing, file snapshots, and audit logging.

ivan-magda/swift-security-skill

Plugin Claude Code

Bundles 1 skill · 122 tokens together

Expert guidance for Apple Keychain Services, biometric authentication, CryptoKit cryptography, credential lifecycle management, certificate trust, and OWASP compliance mapping.

Copenhagen0x/solana-security-standard

Plugin Claude Code

Bundles 1 command, 2 MCP servers · 20 tokens together

The Solana Security Standard (SOL-0XX) in Claude Code: the scansolanacode MCP tool + the full 52-rule guidance, plus a /scan command — by Jelleo.

ChronoAIProject/NyxID

Plugin Claude Code

Bundles 16 skills, 2 plugins · 1,929 tokens together

CLI edition: NyxID skills for agents that drive the nyxid CLI or the authenticated Web API, plus the synchronized Aevatar platform skill family. For the hosted MCP connection, install the nyxid plugin.

theogbrand/yoink

Plugin Claude Code

Bundles 4 skills, 4 agents, 3 hooks · 233 tokens together

A plugin to clone dependencies you don't trust. No more supply chain attacks.

alicankiraz1/SentinelXPrime

Plugin Claude Code

Bundles 5 skills, 1 hook · 203 tokens together

Stage-aware security guidance for planning, risky implementation changes, review, and release checkpoints.

skarn-security/agent-guard

Plugin Claude Code

Bundles 6 hooks, 1 MCP server

Real-time guard on five Claude Code pre-execution hook events (tool calls, permission decisions, submitted and expanded prompts, and subagent creation) plus a response-end advisory that flags an action leaking a secret, installing a malicious package, or exfiltrating data, plus the skarn-audit skill (scan sessions and.