Claude Code and Codex plugins their authors filed under "security". All categories.
Scans every file Claude writes for insecure code and hard-coded secrets with the local kestrix-scan scanner and has Claude fix the findings; checks package installs against a local OSV index; secure-review skills and /kestrix:scan, /kestrix:fix and /kestrix:review. Offline; hooks open no network connections.
7 skills · hooks
Read-only vulnerability assessment for Microsoft Defender estates: collect, enrich with CVE intelligence, prioritize by software product, report.
5 skills · 1 agent · 1 MCP server
Detects and blocks API keys, tokens, and credentials in Claude Code sessions before they leak.
6 skills · hooks
Detects and blocks API keys, tokens, and credentials in Claude Code sessions before they leak.
6 skills · hooks
A collection of harness configuration guide skills (how Claude Code works, settings scopes, hooks, rules, commands, workflows, memory)
7 skills
Professional skills for OSV vulnerability schema parsing, validation, filtering, severity analysis, affected package analysis, and querying — with Go SDK and CLI support
7 skills
Map the probe set onto STRIDE + agentic axes, run the Elevation-of-Privilege gap ritual, and propose new rules via PR (never self-merge).
3 skills · 3 commands · 1 agent
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
4 skills · 3 agents
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
4 skills · 3 agents
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
4 skills · 3 agents
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
4 skills · 3 agents
Run a Strix Governance Review (SGRF v1) on a system (/strix-governance:runtime-governance-review), a PR (/strix-governance:govern-pr), or a release (/strix-governance:release-readiness) — and wire a first governed, recorded action (/strix-governance:strix-wire). Self-host governed AI egress — a de-identifying proxy for OpenAI/Anthropic calls plus a local Claude Code prompt hook (/strix-governance:govern-ai-egress). Plugin skills are namespaced /strix-governance:<skill>. The three review lenses are advisory and run anywhere; strix-wire needs no account — Sandbox Mode auto-provisions a short-lived credential and Offline Mode makes no network calls.
7 skills
Execution control for the agents you use every day. Scan a repository for consequential actions (payments, deletes, sends, migrations, AI tool use), wrap the risky ones with Strix governance, test that the wrap governs, and check your status: /strix-personal:strix-scan, :strix-plan, :strix-apply, :strix-test, :strix-status, and :strix-wire. Receipts verify independently with npx @strixgov/verifier. The plugin renders proof; it never determines it.
2 skills · 5 commands
App-layer security for your builds: ASVS-lite checks (credentialed CORS, stack traces in responses, debug routes, sign-out that only clears the browser, object writes without an ownership reference), outbound-fetch guard against SSRF, abuse and spend (uncapped paid APIs, unset caps that mean unlimited, open proxies, per-client ceilings, caller-set LLM params), auth gates that open on their own (a guard skipped when a secret is unset, identity from a bare header, Access trusted only at the edge, open better-auth sign-up), AI route metering (a daily counter reserved before every paid call, with a drop-in guard template), authorization inside MCP tools (every tool-reachable query scoped to the signed-in identity, no identity from tool arguments, privileged tools gated), and tests proven by removing each protection. Requires secure-core.
7 skills
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
4 skills · 3 agents
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
4 skills · 3 agents
Did a PR, commit or commit range break something that used to work? Pins the before and after states, hunts candidate regressions in the diff, then has three separate fresh agents reproduce, replay and adjudicate each one on live S0 and S1 builds. Sealed evidence, an attempt registry and an HTML/Markdown/JSON report stay in a campaign directory outside the repo; GitHub is only read.
7 skills
Myrmion blackbar — detect and redact PII/PHI/financial data with Microsoft Presidio across the Claude Code lifecycle.
1 skill · 3 commands · 1 MCP server · hooks
Audits your app for exposed secrets, missing RLS, unprotected API routes and other launch-blocking gaps, generates the RLS and auth fixes, and blocks hardcoded API keys before they are written to disk.
4 skills · 1 agent · hooks
Security checker for personal development products
6 skills
Guardrails and bounded strategy playbooks for running an AI agent on Robinhood agentic trading: spending caps, approval gate, circuit breaker, kill switch, prompt-injection defense, and how to bound common strategies.
6 skills
EDAMAME Security for Claude Code. EDAMAME's host-side observer runs two-plane divergence detection automatically -- no plugin required; this plugin adds off-host coverage plus in-agent posture and divergence verdicts, safety-floor guardrails, and turnkey MCP onboarding.
2 skills · 2 commands · 1 agent · 1 MCP server
Backend, frontend, network, system, database, and dependency/supply-chain security scanning checklists.
6 skills
Onboard cloud and SaaS data sources into SubImage from your IaC or CLI environment (AWS, GCP, Azure, GitHub, Kubernetes outpost). Terraform / CloudFormation / Helm / aws-cli / gcloud / az / gh paths.
6 skills
Multi-account Bitwarden password manager with 3 skills, 3 slash commands, MCP server (8 tools), and security hooks
3 skills · 3 commands
Hybrid email attachment processing: deterministic CLI extractors normalize PDF, DOCX, images, and Office docs to text, metadata, and previews before Claude scores for phishing, triage, and policy routing
3 skills · 3 commands
Hardens Claude Code dev environments: pnpm supply-chain config + npx-to-pnpm-dlx migration; mode-agnostic .claude/settings.json deny/ask rules and v2.1.83+ auto-mode overlay (defaultMode + classifier backstops); PreToolUse hooks (credential reads, package.json scripts tampering); PostToolUse trust-boundary reminder for non-vendor WebFetch results
5 skills · hooks
The Vanta plugin connects Claude to Vanta's security and compliance platform through the Vanta MCP server. List failing compliance tests, get test-specific remediation context, and fix failing tests with code changes — directly from your Claude session.
3 skills · 3 MCP servers
The Vanta plugin connects Claude to Vanta's security and compliance platform through the Vanta MCP server. List failing compliance tests, get test-specific remediation context, and fix failing tests with code changes — directly from your Claude session.
3 skills · 3 MCP servers
The Vanta plugin connects Claude to Vanta's security and compliance platform through the Vanta MCP server. List failing compliance tests, get test-specific remediation context, and fix failing tests with code changes — directly from your Claude session.
3 skills · 3 MCP servers