blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
4
claude
identity-access-management
Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.
/
Plugin identity-access-management from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (2)
access-control-modelsRBAC, ABAC, and ReBAC (Zanzibar-style) reference with a decision framework, implementation patterns, a segregation-of-duties matrix, and anti-patterns such as role explosion and hard-coded authorization. Use when choosing or implementing an authorization model or fixing IDOR-style ambient authority.
mfa-implementationMFA reference covering factor types, NIST AAL levels, WebAuthn/FIDO2 registration, TOTP implementation, enforcement middleware with step-up auth, and bypass risks such as SMS SIM swap and prompt bombing. Use when adding or hardening multi-factor authentication.
Slash commands (2)
/identity-access-management:auth-flow-reviewReview authentication and authorization flows (OAuth 2.0/OIDC, SAML SSO, JWT, session cookies, API auth) for security issues, covering session management, token handling, authorization, and password storage.
/identity-access-management:iam-auditAudit who has access to what across an application or infrastructure: inventory identities, find over-privileged and orphaned accounts, assess the access control model, and review access governance.
Subagents (2)
access-control-auditorUse this agent when auditing an existing access control setup: finding over-permissive or dormant roles, privilege creep, shadow admins, orphaned accounts, or segregation-of-duties conflicts in RBAC, ABAC, or ReBAC systems. It compares granted permissions with actual usage and produces findings plus
iam-architectUse this agent when designing identity architecture: choosing an identity provider, SSO with OIDC or SAML, MFA (WebAuthn/FIDO2, passkeys, TOTP), an access control model, or token and session lifecycles. It produces an IAM architecture review grounded in NIST 800-63 and OWASP ASVS; to audit existing
More from HermeticOrmus/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
4
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
4
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
4
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
4
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
4
Similar plugins
aws-core
claudecodexBuild, deploy, and operate applications on AWS. Skills to author infrastructure-as-code, use core services, and complete common tasks.
27 skills · 1 MCP server
anthropics/claude-plugins-official 47,076
cc-aws-keepalive
claudeKeeps Claude Code sessions on AWS Bedrock alive through credential expiry. Scripts for awsCredentialExport and awsAuthRefresh, added to settings.json by hand, read fresh credentials from ~/.aws/credentials and can re-run your login. A UserPromptSubmit hook warns when expiry is near or past. Works with saml2aws, gimme-aws-creds, aws-google-auth and any tool that writes to ~/.aws/credentials.
hooks
davepoon/buildwithclaude 3,741
aws-core
claudecodexBuild, deploy, and operate applications on AWS. Skills to author infrastructure-as-code (CDK, CloudFormation), use core services (Lambda, API Gateway, Step Functions, ECS/Fargate, ECR, IAM, Amazon Bedrock with Knowledge Bases and Guardrails, AWS Blocks), select and operate databases across relational, key-value, document, wide-column, graph, time-series, and in-memory engines (Aurora PostgreSQL/MySQL, Aurora DSQL, RDS, Oracle Database@AWS, DynamoDB, DocumentDB, Keyspaces, Neptune, Timestream, ElastiCache, and MemoryDB), and complete common tasks across observability (CloudWatch, X-Ray, CloudTrail, ADOT), messaging and streaming (SQS, SNS, EventBridge, Kinesis, MSK), AWS SDKs (boto3, JS v3, Swift), cost optimization, and Well-Architected Framework reviews across all six pillars.
27 skills · 1 MCP server
aws/agent-toolkit-for-aws 3,477
vastai-pack
claudeEvidence-gated Vast.ai operator pack for GPU rentals, Serverless, governance, recovery, and cost control (24 skills)
24 skills
jeremylongshore/tons-of-skills-marketplace 2,917
aws-agent-skills
claudeCollection of AWS engineering skills for IAM, Lambda, DynamoDB, S3, and 14 other core AWS services
18 skills
itsmostafa/aws-agent-skills 1,175
prd-specialist
claudeUse this agent when you need to create comprehensive Product Requirements Documents (PRDs) that combine business strategy, technical architecture, and user research. Examples: <example>Context: The user needs to create a PRD for a new feature or product launch. user: "I need to create a PRD for our new user authentication system that will support SSO and multi-factor authentication" assistant: "I'll use the prd-specialist agent to create a comprehensive PRD that covers the strategic foundation, technical requirements, and implementation blueprint for your authentication system."</example> <example>Context: The user is planning a major product initiative and needs strategic documentation. user: "We're launching a mobile app for our e-commerce platform and need a detailed PRD to guide development" assistant: "Let me engage the prd-specialist agent to develop a thorough PRD that includes market analysis, user research integration, technical architecture, and implementation roadmap for your mobile app initiative."</example>
1 agent
ccplugins/awesome-claude-code-plugins 1,005
Maintain identity-access-management?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins