SecID — universal security identifier lookup, resolution, and registry research. Resolve CVEs, CWEs, ATT&CK techniques, NIST controls, and 700+ security knowledge sources. Local MCP server calls the SecID REST API with optional --base-url for internal resolvers.
Plugin secid from marketplace csa-plugins-official in CloudSecurityAlliance/csa-plugins-official. Commands read from the repo's manifest — 17 days ago.
This plugin runs code on your machine — it starts local MCP servers. The exact commands are listed below; read them before installing.
/secid:describeDescribe a SecID type — what it covers, how many namespaces, examples. Use when the user asks "what is the methodology type?" or "what types does SecID have?
/secid:lookupLook up what SecID knows about a type, namespace, or source. Use for browsing and discovery — "what advisory sources does Red Hat have?" or "what types exist?
/secid:resolveResolve a SecID string to its URL(s) and registry data. Use when given a full SecID like secid:advisory/mitre.org/cve#CVE-2021-44228 or a partial identifier.
READMEsecidruns: python3 ${CLAUDE_PLUGIN_ROOT}/server.py
AI-driven source-code vulnerability audit: a 5-stage methodology (recon, investigate, validate, disclose, learn) with adversarial false-positive filtering and conservative, cooperative disclosure. Static-only; hands off to the defending-code harness for runtime-verified findings.
2 skills
Large-N analysis of the CVE corpus: growth attribution, CNA behaviour profiling, record completeness, and CWE assignment quality. Answers whether CVE growth is real, whether CVE data is improving, and why each CNA participates — with the corpus pitfalls that produce confidently wrong answers.
1 skill
CWE assignment and vulnerability chain analysis for CNAs, security researchers, and vendors. Guides analysts through vulnerability understanding, code examination, CWE identification, chain mapping, and quality validation.
1 skill
Comprehensive security incident analysis with OSINT collection, source cross-referencing, confidence classification, and deep analysis. Teaches analysts the methodology while producing structured reports.
1 skill
Map relationships between security knowledge sources using the NIST IR 8477 methodology. Supports four relationship styles (crosswalk, supportive, set theory, structural), guided use case documentation, cross-model validation, and multiple output formats including OLIR/CPRT-compatible JSON and Excel.
1 skill
Ingest security knowledge documents (standards, regulations, frameworks, controls, capabilities) into structured, machine-readable data. Checks SecID for existing structured data, handles license verification for contributions, produces reproducible conversion recipes, and guides users toward proper data management.
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.