Claude Code and Codex plugins their authors filed under "security". All categories.
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
10 skills · hooks
Reviews Kiteworks user accounts, reconciles them with an HR list, and can save an access-review report.
7 skills · 3 agents · hooks
Bright DAST discovery, scanning, and remediation for Claude Code: register endpoints from the code, run scans through a Repeater, and fix findings via the Bright MCP server.
7 skills · 3 agents · 1 MCP server
SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, regulatory documentation, SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 4 commands · 2 agents
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
10 skills · hooks
Free guardrails and engineering discipline for AI coding: blocks leaked secrets (incl. AI-provider keys) before commit/push, destructive commands and insecure defaults; backs up before edits; verify-before-done; project continuity (init · checkpoint · resume); Coach mode; AI-use reports; self-testing doctor. Local only. English and Bahasa Malaysia.
9 skills · 1 command · hooks
Multi-agent swarm architecture for full-lifecycle bug bounty hunting. 5 specialized agents (RECON, SCAN, FUZZ, EXPLOIT, REPORTER) coordinated by a Supervisor through a Shared Bus Protocol.
1 skill · 4 commands · 5 agents
IT-Grundschutz-Berater (BSI): OSCAL-Korpus von Grundschutz++ (Anwenderkatalog + Methodik) lokal vorhalten, Anforderungen zitierfähig nachschlagen, Dokumente nach der Methodik erstellen, IT-Grundschutz-Check (Soll-Ist) durchführen, Editionen migrieren, Bausteine modellieren, kryptographische Verfahren nach BSI TR-02102 (+ NIST/FIPS) bewerten
8 skills · 1 command · 1 agent
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Finds what's shared inside a Kiteworks folder so you can review who has access, and can save a report.
8 skills · 1 agent · hooks
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
9 skills · 1 agent
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
9 skills · 1 agent
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
1 skill · 8 agents · hooks
Rhyolite is an open-source software analysis platform. Its initial, default, and currently only shipped module is repo-review, delivered here as a Claude Code plugin for read-only analysis of public HTTPS Git repositories and optional provenance review for agentically generated code.
2 skills · 5 commands · 3 agents
Threat models, static security findings and patch proposals, and incident review using Anthropic Defending Code resources.
10 skills
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Offensive security work, end to end: scoping and permission, testing at any level of access, weakness research, scoring, proofs, backports and reports.
9 skills
Enterprise Auth0 OAuth 2.0 implementation plugin with setup wizards, framework-specific code examples, security audits, compliance checklists (GDPR/HIPAA/SOC2), and troubleshooting guides for production OAuth deployments.
5 commands · 4 agents
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
1 skill · 7 agents · hooks
Security audit plugin for Next.js + Supabase projects - secrets, RLS, auth, dependencies
1 skill · 6 commands · 1 MCP server
Reco SaaS & AI security — query app risks, shadow IT, AI agents, user posture, and access events directly from Claude Code
1 skill · 5 commands · 1 agent · 1 MCP server
Seven focused audit skills plus a consolidator. Read-only: writes Markdown plans under .plans/ and never modifies source code.
8 skills
Safety hooks for Claude Code (rm -rf, credential exfil, force-pushes, protected files, subagent scope) with a queryable JSONL decision log.
1 skill · 6 commands · hooks
Security craft: STRIDE, OWASP review, supply-chain, auth design, compliance mapping, DevSecOps pipeline, crypto review, LLM-security audit.
8 skills
Agent skills for bug bounty and pentesting.
8 skills
Scans every file Claude writes for insecure code and hard-coded secrets with the local kestrix-scan scanner and has Claude fix the findings; checks package installs against a local OSV index; secure-review skills and /kestrix:scan, /kestrix:fix and /kestrix:review.
7 skills · hooks