blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
4
claude
kubernetes-security
Kubernetes security: cluster hardening, RBAC audits, Pod Security Standards, NetworkPolicy, and admission control with Gatekeeper or Kyverno.
/
Plugin kubernetes-security from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (2)
k8s-rbac-patternsKubernetes RBAC reference: the Role and ClusterRole binding model, evaluation logic, escalation paths, least-privilege patterns for developers, CI/CD, monitoring, and break-glass access, plus common misconfigurations. Use when writing RBAC manifests or reviewing who can do what in a cluster.
k8s-security-policiesPod Security Standards and Pod Security Admission, NetworkPolicy fundamentals with default-deny and service-to-service patterns, restricted-profile pod security contexts, and Kyverno examples. Use when hardening workloads or writing NetworkPolicy and admission rules.
Slash commands (2)
/kubernetes-security:k8s-rbac-auditAudit Kubernetes RBAC: flag over-permissive roles and bindings, review service account tokens, and trace privilege escalation paths at cluster and namespace level.
/kubernetes-security:k8s-sec-auditAudit a Kubernetes cluster or its manifests (Helm charts, Kustomize overlays) across control plane, RBAC, workload security, network policy, and secrets and supply chain, aligned with the CIS Kubernetes Benchmark.
Subagents (2)
k8s-policy-enforcerUse this agent when writing or reviewing Kubernetes admission policy: Pod Security Admission and Pod Security Standards, OPA/Gatekeeper constraints, Kyverno policies, or ValidatingAdmissionPolicy with CEL. It returns policy YAML with an audit-then-enforce rollout; for whole-cluster architecture revi
k8s-security-architectUse this agent when reviewing or designing a Kubernetes cluster's security architecture: API server and etcd hardening, node and runtime security, RBAC, NetworkPolicy, multi-tenancy, secrets, and managed EKS, GKE, or AKS differences. It assesses each layer against the CIS Kubernetes Benchmark and pr
More from HermeticOrmus/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
4
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
4
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
4
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
4
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
4
Similar plugins
crowdsec
claudeOperational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
2 skills
anthropics/claude-plugins-official 47,076
cloud-infrastructure
claudecodexCloud architecture design for AWS/Azure/GCP/OCI, Kubernetes cluster configuration, Terraform infrastructure-as-code, hybrid cloud networking, and multi-cloud cost optimization
8 skills · 7 agents
wshobson/agents 42,461
45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.
48 skills · hooks
alirezarezvani/claude-skills 29,725
voltagent-infra
claudeDevOps, cloud, and deployment specialists - Kubernetes, Terraform, AWS, Azure, GCP, and SRE
VoltAgent/awesome-claude-code-subagents 26,513
prowler
claudeConnect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.
1 skill · 1 MCP server
prowler-cloud/prowler 15,234
kubeshark
claudeNetwork observability skills powered by Kubeshark MCP — root cause analysis, KFL traffic filtering, snapshot forensics, PCAP extraction.
4 skills · 1 MCP server
kubeshark/kubeshark 12,137
Maintain kubernetes-security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins