Security plugins

Defense-Grade Security - NIST compliance, security controls, cryptography, and secure development practices

1 command · 1 agent

[curated by Tehvault] Static security scanning — valuable for a payments / vault product. — Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.

1 MCP server · hooks

Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.

1 skill · 1 MCP server

Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.

1 skill · 1 MCP server

SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, and regulatory documentation

1 command · 1 agent

SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, and regulatory documentation

1 command · 1 agent

Codex plugin for Burp-driven web security workflows.

1 skill · 1 MCP server

Codex plugin for Vanta compliance workflows.

1 skill · 1 MCP server

Codex plugin for OWASP ZAP MCP workflows.

1 skill · 1 MCP server

Security audit from an attacker's and security architect's view: threat model, vulnerability checklist and concrete fixes for JS/TS, Python and Rust.

1 skill · 1 command

Aurels security guard for Codex tool execution.

1 MCP server · hooks

Keep your API keys and tokens out of your Claude Code conversations: paste capture, a masked /keyfob panel, a guard on Claude's Bash, and the OS keystore handing each command only its keys

1 skill · hooks

A secure-by-default protocol and pre-execution seatbelt for every AWS CLI command: identity gate, least-privilege profiles, purpose stamping, staged mutations, professional tagging, and an evasion-hardened enforcement hook.

1 skill · hooks

Integrate Xident age and identity verification — an agent skill plus a sandbox MCP server for docs lookup, test verifications, and webhook debugging.

1 skill · 1 MCP server

Validated Cybret API and app security findings, explanations, and remediation status.

1 skill · 1 MCP server

The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more.

1 skill · 1 MCP server

Set up and verify a Postman Passport proxy (local Docker, AWS single instance), then register APIs and manage credentials via the public API.

2 skills

rls-check + stripe-webhook-check: free, read-only security checks for Supabase migrations and Stripe webhooks.

2 skills

Check unfamiliar links for scams and phishing before your agent opens them, signs in, or pays. Adds the Outtake Flash MCP server and the outtake-flash skill.

1 skill · 1 MCP server

Protect AI coding agents from malicious URLs with Netcraft checks and user-initiated reporting.

2 skills

Pre-launch security and cost-risk scanner for vibe-coded web apps

1 skill · 1 command

Launch check skill plus the Securealy MCP server: grade a URL, scan the repo, check Supabase RLS, Stripe webhooks and Vercel env, fetch fixes.

1 skill · 1 MCP server

Gate aws/terraform/terragrunt on the AWS SSO role behind the profile: read runs, admin asks, unknown is blocked. PreToolUse hook plus PATH shims.

1 skill · hooks

Investigate phishing and malicious URLs with the ScanMalware scan archive.

1 skill · 1 MCP server

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

1 skill · 1 MCP server

Find provider keys before they are committed, stop one reaching a model, and run a coding agent with its traffic governed and receipted on this machine.

1 skill · 1 command

Read-only MCP server over the ICIJ Datashare HTTP API: 8 search/analytics/read tools, 3 resources, and the datashare-corpus method skill.

1 skill · 1 MCP server

Sanctuary MCP server for AI agents: encrypted local state, a self-held identity, approval gates and a hash-chained record. The OS-level wall (macOS; Ubuntu 24.04 x86-64 via a separate package) is armed separately.

1 skill · 1 MCP server

Configure, run, and interpret HawkScan DAST results. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.

1 skill · hooks

A vault Claude can use but never read. Secure Enclave encryption, Touch ID approval for every use, secure 2-step code prompts.

1 skill · 1 MCP server