claude

Zaraat Dost · Security

Security review for Next.js/Flask/.NET/Expo, dependency and licence audits, branch protection, repository hardening templates

10 on GitHubby Zaraat Dost ML/GIS teamv7.6.1MITupdated 1 month agoengineering
/

Plugin zd-security from marketplace zaraatdost in Adilmunawar/ZD-claude-plugin. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (3)

  • dependency-audit

    Vulnerability and licence audit for npm, pip and dotnet with an upgrade plan.

  • harden-repo

    Apply SECURITY.md, Dependabot, secrets-scan workflow, CODEOWNERS and .gitignore baseline; list GitHub settings to enable.

  • security-review

    Application security checklist: auth and session, authorisation and Firestore rules, input validation, secrets, PII exposure, dependencies, infra and CI. Apply during any security review.

Subagents (1)

  • security-reviewer

    Read-only security reviewer for the dashboard, inference backend, .NET API and Expo app; ranked findings with evidence and fixes. Use for 'is this secure' or pre-release reviews.

View source on GitHub

More from Adilmunawar/ZD-claude-plugin

All 16 plugins →

Spatial database study and management, dashboards, layer publishing — Python or .NET

7 skills · 3 agents

10

.NET dashboard/API conventions: feature slices, proc-backed data, migration-free schema changes with rollbacks, WinSW deployment, legacy parity

7 skills · 2 agents

10

Next.js + Firebase + Earth Engine dashboard conventions: cadastral schema, GEE API routes, Pyodide workers, inference backend

7 skills · 1 agent

10

End-to-end cadastral and land-use pipeline: boundary inference, spectral features, classification, sub-parcelling, SAM2

6 skills · 1 agent

10

Code review standards, conventional commits, PR descriptions, changelog generation, architecture decision records, tech-debt audits

6 skills · 1 agent

10

Similar plugins

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Long-term semantic memory for Claude Code, powered by OpenViking

5 skills · 1 command · 1 MCP server · hooks

volcengine/OpenViking 42,126

prowler

claude

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server

prowler-cloud/prowler 15,234

Triage, budget, constraints, and verifier skills. Pair with npx @cobusgreyling/loop init . --tool claude

14 skills

cobusgreyling/loop-engineering 11,762

improve

claude

Point it at a codebase and it figures out what's worth doing — bugs, perf, tech debt, what to build next — then writes plans any agent can execute. It can hand the work to a cheaper model and review the result. It never edits your code.

1 skill

shadcn/improve 11,576

Maintain Zaraat Dost · Security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins16 plugins