Security skills: threat modeling, privacy review, and a manual security audit scan.
Not in a marketplace yet, so it loads for one session with --plugin-dir.
Plugin security in Adminhead/claude-plugins. Commands read from the repo's manifest — today.
auditSecurity audit of the current branch's changes and dependencies. Runs gitleaks, semgrep, trivy, govulncheck, and pip-audit through one script, has a subagent verify the findings and review the diff, then reports a ranked table and asks which findings to fix. Not for a model-only read of the branch d
privacy-reviewPrivacy and data-handling review of a codebase or change. Inventories personal data across models, DTOs, logs, telemetry, and third-party calls, traces where it flows and rests, and checks minimization, retention, erasure, export, and PII in URLs and logs. Reports findings with file:line evidence an
threat-modelSTRIDE threat model of a system or repo, built from the code. Draws trust boundaries and a data-flow diagram, applies STRIDE per element, verifies each gap against the code and platform defaults before flagging it, tiers findings by exploitability, and turns threats into testable requirements and ma
The orchestrated-session crew: 14 subagents (coders, reviewers, debuggers, architect, devops, dba, scribe, browser tester) plus the orchestration main-thread agent, with a read-only Bash gate for the read-only agents, orchestration nudge hooks, and the orchestration system-prompt file. Agents are spawned as crew:<name>.
15 agents · hooks
Skills for authoring Claude Code skills, agent instruction files, architecture decision records, and docs; mapping codebases and domain models; planning agent teams; and auditing documentation and reviewing Claude Code config for bloat and security.
9 skills
GitHub workflow skills: issues, issue breakdown, triage, pull requests and review comments, shipping commits through merge, and releases, plus the GitHub remote MCP server.
7 skills · 1 agent · 1 MCP server
Public API design skills: REST contracts, idempotency and retries, webhooks, versioning, gRPC, GraphQL, API keys, and OAuth providers.
8 skills
Code search: ripgrep, CodeGraph's local symbol graph with auto-indexing, Context7 library docs, public GitHub code via grep.app, and always-on search guidelines.
4 skills · 3 MCP servers
JavaScript and TypeScript skills: the languages, React, Vue, Vite, TanStack, and click-path audits of UI flows.
7 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.