blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
4
claude
api-security-testing
API security assessment for REST, GraphQL, gRPC, and WebSocket interfaces against the OWASP API Security Top 10, including authentication flow audits and secure auth patterns.
/
Plugin api-security-testing from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (1)
api-auth-patternsSecure implementation patterns for API authentication and authorization: OAuth 2.0 flows, JWT best practices, API key handling with constant-time comparison, mTLS, session management, authorization middleware, token refresh, and rate limiting. Use when building or reviewing API auth code.
Slash commands (1)
/api-security-testing:api-sec-auditAudit the current project's API endpoints against the OWASP API Security Top 10: discover endpoints, assess each category, and produce a findings report with remediation priority.
Subagents (2)
api-security-testerUse this agent when reviewing the security of your own or an authorized REST, GraphQL, gRPC, or WebSocket API against the OWASP API Security Top 10 (2023): BOLA, broken function-level authorization, mass assignment, data exposure, gateway and serialization issues. It produces an API inventory, sever
auth-flow-auditorUse this agent when auditing how an API authenticates callers: OAuth 2.0 and OIDC flows (PKCE, redirect URIs, state), JWT validation and algorithm confusion, API keys, session cookies, MFA, and password reset flows. It traces each step from credential submission to token validation and produces a fl
More from HermeticOrmus/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
4
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
4
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
4
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
4
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
4
Similar plugins
ruflo-x-gateway
claudeRemote RuFlo Federation MCP connector for signed channels, work claims, evidence, and cross-agent coordination
1 MCP server
ruvnet/ruflo 81,589
apollo-skills
claudeApollo GraphQL agent skills for Claude Code — Apollo Client, Server, Federation, Connectors, Router, Rover CLI, iOS, Kotlin, and the Apollo MCP server. Covers schema design, query optimization, and GraphQL best practices.
14 skills · 1 MCP server · LSP
anthropics/claude-plugins-official 47,076
backend-development
claudecodexBackend API design, GraphQL architecture, workflow orchestration with Temporal, and test-driven backend development
9 skills · 1 command · 8 agents
wshobson/agents 42,461
Zoom
claudePlan, build, and debug Zoom integrations across REST APIs, Meeting SDK, Video SDK, webhooks, bots, and MCP workflows. Search meetings, retrieve recordings, access transcripts, and design AI-powered Zoom experiences.
44 skills · 3 MCP servers
anthropics/knowledge-work-plugins 35,601
Anarlog
claudecodexSearch local Anarlog meetings or connect to Cloud with OAuth.
1 skill · 1 MCP server · app connector
fastrepl/anarlog 9,880
notfair
claudecodexOpen-source SEO, GEO, and marketing skills (48) with one hosted NotFair MCP connection (OAuth). Audit sites and content for search and AI-answer visibility, analyze GA4 and Search Console, review Google, Meta, X, LinkedIn, Reddit, and TikTok Ads, and operate connected WordPress and GoHighLevel accounts. Every spend change and WordPress or CRM write waits for explicit approval of the exact change; fetched pages, ad and competitor text, and tool output are treated as untrusted data.
45 skills · 1 MCP server
davepoon/buildwithclaude 3,741
Maintain api-security-testing?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins