claude

vulnerability-scanning

Vulnerability scanning and triage for systems you own or are authorized to assess: scanner selection across SAST, SCA, container, IaC, cloud, and secrets, plus CVSS and exploitability-based prioritization.

4 on GitHubby Diego Bodartv1.0.0MITupdated 1 month ago
/

Plugin vulnerability-scanning from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (1)

  • cvss-scoring

    Reference for CVSS v3.1 and v4.0 metrics, scoring guidance, and the difference between severity and remediation priority. Use when scoring a vulnerability, checking a vendor score, or explaining a CVSS vector.

Slash commands (2)

  • /vulnerability-scanning:vuln-scan

    Run a structured vulnerability assessment on a codebase, container image, or infrastructure you are authorized to assess, choosing scanners by target type and consolidating the findings.

  • /vulnerability-scanning:vuln-triage

    Prioritize vulnerability findings into a risk-based remediation plan using exploitability, asset criticality, and effort.

Subagents (2)

  • vuln-scanner-orchestrator

    Use this agent when assessing code, dependencies, containers, IaC, cloud accounts, or secrets that you own or are authorized to assess, and scanners must be chosen and configured. It tunes tools such as Semgrep, CodeQL, Trivy, Checkov, and Gitleaks, then deduplicates results into one report with cov

  • vuln-triager

    Use this agent when you have a backlog of scanner findings or CVEs and need to decide what to fix first. It adjusts severity with CVSS v3.1 or v4.0 environmental metrics, EPSS, the CISA KEV catalog, and asset criticality, flags likely false positives, and groups fixes into prioritized remediation ba

View source on GitHub

More from HermeticOrmus/LibreSecOps-Claude-Code

All 33 plugins →

blue-team-detection

claude

Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

2 skills · 2 commands · 2 agents

4

bug-bounty-methodology

claude

Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

2 skills · 2 commands · 2 agents

4

compliance-frameworks

claude

Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

2 skills · 2 commands · 2 agents

4

container-security

claude

Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

2 skills · 2 commands · 2 agents

4

devsecops-pipelines

claude

Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

2 skills · 2 commands · 2 agents

4

forensics-analysis

claude

Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

2 skills · 2 commands · 2 agents

4

Similar plugins

ai-plugins

claude

Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain

12 skills · 11 agents · hooks

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

StackHawk HawkScan

claudecodex

Configure, run, and interpret HawkScan DAST results. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.

1 skill · hooks

anthropics/knowledge-work-plugins 35,601

penetration-tester

claude

25-skill pentest pack with engagement governance, network/code/dependency scans, OWASP Top 10 mapping, and exec-readable reporting. Heavy-hitter compliant; chain-of-custody attestable.

26 skills · 2 commands

jeremylongshore/tons-of-skills-marketplace 2,917

arckit-uk-finance

claude

UK Financial Services Payments Overlay — 4 commands for established UK PSPs / EMIs / PIs: PSD2 SCA-RTS exemption design, EMI/PI safeguarding, FCA Consumer Duty board report, Critical Third Parties dependency assessment. Recipe: uk-fs-payments. First sector-specific overlay.

4 commands

tractorjuice/arc-kit 2,277

cis-controls

claude

CIS Controls v8 (CIS Top 18) advisor — Implementation Group scoping (IG1/IG2/IG3), gap assessments across all 153 safeguards, asset/software inventory, data protection, secure configuration, MFA and access control, vulnerability management, audit log management, malware defenses, incident response, penetration testing, and CIS Controls mapping to NIST CSF 2.0, ISO 27001:2022, SOC 2, PCI DSS, and CMMC 2.0. Use for any CIS Controls, CIS Benchmarks, or prioritized cyber hygiene question.

1 skill

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance 1,069

Maintain vulnerability-scanning?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins33 plugins