59 tagged sast, measured the same way as everything else here.
Browse within: appsec 42semgrep 42claude-code-plugin 33threat-modeling 33ai-security 31ide 18security-tools 17devsecops 16kotlin 16spring 16code-editor 14electron 14DAST 11ai-skill 11
Skill Claude CodeCodex needs its repo
Detect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites), batched verify (check extension bypass and related issues in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first).…
DevSwat-ResonantGenesis/RG_IDE
Skill Claude CodeCodex
Create or update repository skills and instructions when major learnings are discovered during a session. Use when the user says "learn!", when a significant pattern or pitfall is identified, or when reusable domain knowledge should be captured for future sessions.
Skill Claude CodeCodex
Elite manual security code review skill for deep, adversarial vulnerability hunting and exploit-chain discovery. Trigger when the user asks to: "do a deep security audit", "manual code review", "find exploit chains", "hunt for logic bugs", "red-team this codebase", "do an offensive security review", "review this like…
ch0ks/hackarandas-claude-toolbelt
Skill Claude Code
Triage security findings from Semgrep Pro and Claude security-code-review using IaC files as deployment context (Terraform, Kubernetes, Docker Compose, CloudFormation, Azure Pipelines). Detects whichever IaC files are present, extracts deployment facts, scores each finding with CVSS 4.0 with per-vector justification…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: