Security plugins

1,334 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 240compliance 107agentic-ai 91mcp-server 81fedramp 78devsecops 62model-context-protocol 62claude-plugin 61ai-tools 57ai-security 55claude-ai 53skills 51agents 48cursor 45

CrowdStrike/foundry-skills

Plugin Claude Code

Bundles 12 skills, 3 hooks · 1,452 tokens together

CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows. Swagger 2.0 specs are auto-converted to OpenAPI 3.0 via npx swagger2openapi (requires…

not rated 35 +1 changed 16d ago A tokens not measured original MIT

varlock

170

wrsmith108/varlock-claude-skill

Plugin Claude Code

Bundles 1 skill · 73 tokens together

Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.

not rated 33 7mo ago A tokens not measured original MIT

proteus

171

Vyntra-Research/Proteus

Plugin Claude Code

Bundles 10 skills · 518 tokens together

A plugin for Claude Code and Codex that coordinates structured, continuous vulnerability research with memory, strategy, and realistic validation.

not rated 33 +1 changed today A tokens not measured GPL-3.0

agent-guard

172

JeongJaeSoon/agent-guard

Plugin Claude Code

Bundles 2 skills, 2 commands, 5 hooks · 267 tokens together

Local-by-default, no-telemetry hooks inspect user prompts, supported tool inputs, outputs, and changed files in every enabled Claude Code or Codex session to block or mask secret leaks. Includes opt-in PII filtering and Git/CI backstops.

not rated 33 +1 changed today A tokens not measured copy · 86% MIT

contrastapi

173

UPinar/contrastapi

Plugin Cursor

Bundles 1 MCP server

47 security research tools over remote MCP — CVE + EPSS/KEV, MITRE CWE catalog + KEV detail, domain audit + DNS/SSL/WHOIS/subdomain enum + WAF detect, IP threat intel + cloud/Tor/FireHOL classification, IOC enrichment (ThreatFox/Feodo/URLhaus), email/phone/username OSINT, code security checks, MITRE ATLAS AI/ML attack.

not rated 33 yesterday A tokens not measured original MIT

elastic

174

elastic/cursor-plugins

Plugin Cursor ✓ vendor

Bundles 25 skills, 1 MCP server · 1,707 tokens together

Elastic skills and documentation — Elasticsearch, Kibana, Observability, Security, Cloud, ES|QL, OpenTelemetry, and MCP docs access.

not rated 33 1mo ago A tokens not measured original Apache-2.0

hs

175

frmoretto/hardstop

Plugin Claude Code

Bundles 1 skill, 6 commands, 1 hook · 193 tokens together

Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.

not rated 32 6mo ago A tokens not measured

Infisical/ai-skills

Plugin Claude Code

Bundles 1 skill · 212 tokens together

Infisical access control and governance — roles and custom permissions, granular secret actions, ABAC, temporary access, approval workflows, and audit log streaming.

not rated 32 +1 yesterday A tokens not measured original MIT

pixee-cli

178

pixee/pixee-cli

Plugin Claude Code

Bundles 17 skills · 717 tokens together

Skills for using the Pixee CLI: authentication, scans, workflows, repositories, findings, and API access.

not rated 31 changed yesterday A tokens not measured

sorah-guides

179

sorah/config

Plugin Claude Code

Bundles 15 skills, 3 commands, 1 agent · 1,592 tokens together

Coding guidelines and review tools. Skills for general coding, Ruby, Rails (including problem-details errors and protobuf-native APIs), Sorbet typing and adoption, Rust, Terraform, security, git commit style, README writing, and Japanese and English text writing. Includes a security review agent.

not rated 31 yesterday A tokens not measured original MIT

vouch-protocol

180

vouch-protocol/vouch

Plugin Claude Code

Bundles 1 skill · 0 tokens together

Integrate the Vouch Protocol: cryptographic identity and accountability for autonomous AI agents. Signing and verifying agent actions, did:web and did:key, Data Integrity proofs, the post-quantum proof set, delegation chains, and revocation, across SDKs on every major platform.

not rated 28 5d ago A tokens not measured

hackingtool

182

MAXZL1/hackingtool-plugin

Plugin Claude Code

Bundles 1 skill · 132 tokens together

183+ pentesting and OSINT tools (nmap, nuclei, amass, subfinder, httpx, sherlock, maigret, trufflehog, sqlmap, impacket, and more) wired into Claude Code as a single skill. Runs locally on any OS via native Bash, WSL, or purpose-built Docker images (instrumentisto/nmap, projectdiscovery/nuclei, caffix/amass, etc.).…

not rated 27 +4 5d ago A tokens not measured

CrowdStrike/fusion-skills

Plugin Claude Code

Bundles 7 skills, 3 hooks · 592 tokens together

CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files.

not rated 26 changed 16d ago A tokens not measured original MIT

auto-audit

184

wrxck/auto-audit

Plugin Claude Code

Bundles 9 skills, 4 agents, 1 hook · 820 tokens together

Autonomous security auditor. Scans a GitHub repo for vulnerabilities, triages false positives, writes a PoC, fixes each confirmed bug in its own PR, independently reviews the fix, and merges when the review is clean.

not rated 26 2mo ago A tokens not measured

vuln-scout

185

allsmog/vuln-scout

Plugin Claude Code

Bundles 32 skills, 15 commands, 9 agents · 2,759 tokens together

Claude Code plugin for whitebox security review. Stable: deterministic offline quick scan, shared findings.json with stable keys and hotspot-aware findings, SARIF/Markdown/HTML/bundle reports, suppressions, CI fail-on gate, Kuzushi parity. Beta: deep profile with Joern/CodeQL/Slither/Trivy/Checkov when installed.…

not rated 25 4mo ago A tokens not measured original MIT

adacore

186

AdaCore/skills

Plugin Claude Code

Bundles 5 skills · 419 tokens together

AdaCore agent skills for Ada and SPARK development: Alire (package management), GNATprove (SPARK formal verification), GNATfuzz (coverage-guided fuzzing), GNATtest (unit testing), and GNATdoc (documentation generation).

not rated 25 2mo ago A tokens not measured original Apache-2.0

crowdsec

187

crowdsecurity/crowdsec-skill

Plugin Claude Code

Bundles 2 skills · 274 tokens together

CrowdSec skills: an operational skill (install/configure/operate/debug the engine, cscli, bouncers, WAF and bot detection across bare-metal/Docker/Kubernetes) and a Service API skill (drive the premium Console cloud API — blocklists, allowlists, firewall integrations, metrics, decisions).

not rated 25 changed 1mo ago A tokens not measured original MIT

krait

188

ZealynxSecurity/krait

Plugin Claude Code

Bundles 3 skills · 146 tokens together

Smart contract security analysis powered by 4,500+ real audit findings from Solodit. Quick scans, full framework assessments, and integration with audit-readiness.zealynx.io.

not rated 25 +2 18d ago A tokens not measured original MIT

pownie

189

d0gesec/pownie

Plugin Claude Code

Bundles 4 skills · 131 tokens together

Offensive security toolkit for Claude Code — Neo4j intel graph, strategic compaction, multi-agent orchestration, and post-engagement debriefs.

not rated 24 7mo ago A tokens not measured original MIT

slopsec

190

lachydotmcg/slopsec

Plugin Claude Code

Bundles 1 skill · 128 tokens together

Security audit and hardening for vibe-coded SaaS apps. Walks the 50 most common ways AI-generated apps get owned and produces a prioritized fix list.

not rated 24 2mo ago A tokens not measured original MIT

src-hunter

192

fb0sh/pentester

Plugin Claude Code

Bundles 1 skill · 70 tokens together

A collection of tools and instructions for finding security weaknesses through SRC programs, public bug-bounty programs run by companies or platforms.

not rated 24 2mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: