Claude Code plugin marketplace for security auditing. evidence-based skills for constant-time crypto review, compiler-survival checks in binaries, and zero-trust codebase audits.
Skill Claude CodeCodex
Verifies in compiled machine code that security properties survived the compiler: that secret zeroization was not removed by dead-store elimination and that constant-time logic did not regain secret-dependent branches. Use when auditing a binary, shared object, static library, or firmware image whose source claims…
Skill Claude CodeCodex
Audits a codebase, module, or single file for exploitable vulnerabilities across injection, authentication and authorization, secrets management, memory safety, deserialization, SSRF, and dependency risk, gating every candidate through reachability and impact review before reporting. Use when asked to security-audit…
Skill Claude CodeCodex
Audits cryptographic source code for timing side channels, missing secret zeroization, non-constant-time comparison, and weak randomness. Use when reviewing crypto primitives, key/nonce/PSK handling, TLS or handshake code, signature or KEM implementations, or any function that touches secret key material, including…