polymath-author
claudeAuthor craft: scaffold new plugins/skills/connectors, validate against gates, measure listing budget, review skill quality.
5 skills · 6 commands
0
claude
polymath-security
Security craft: STRIDE, OWASP review, supply-chain, auth design, compliance mapping, DevSecOps pipeline, crypto review, LLM-security audit.
/
Plugin polymath-security from marketplace polymath in MohammadBafkar/polymath. Commands read from the repo's manifest — 12 days ago.
What it installs
Skills (8)
auth-designDesign authentication/authorization — OAuth2/OIDC flow choice, JWT vs opaque/session tokens, RBAC vs ABAC, SSO, token lifetime/refresh/revocation.
compliance-mappingMap a compliance framework (SOC 2 / GDPR / ISO 27001 / HIPAA) to concrete technical controls and the evidence/artifacts each control needs for audit.
crypto-reviewReview a cryptography choice — encryption at rest/in transit, key management + rotation, algorithm/mode selection, and common foot-guns (IV reuse, ECB, home-rolled crypto).
devsecops-pipelineDesign security gates into CI/CD — SAST, DAST, SCA/dependency, secret, and IaC scanning — with severity thresholds, a triage flow, and noise control.
llm-security-reviewAudit an LLM system for security — OWASP LLM Top 10, direct/indirect prompt injection, sensitive-data leakage, insecure output handling, RAG and agent-action risks.
owasp-reviewReview a code diff against the current OWASP Top 10; report findings keyed to file:line with severity (high/medium/low) and a fix recommendation.
stride-threat-modelModel a system with STRIDE; writes docs/threat-models/<slug>.md with frontmatter validated by the ThreatModel artifact schema.
supply-chain-reviewReview supply-chain integrity — SBOM, dependency provenance/lockfiles, license audit, signing/SLSA attestation, build trust. Supply-chain posture, not runtime vuln triage (triage-vulns).
More from MohammadBafkar/polymath
All 42 plugins →polymath-cloud
claudeCloud infrastructure design craft: pattern selection across AWS, GCP, Azure + Terraform stack composition.
6 skills · 4 commands
0
polymath-core
claudeFoundation: route prompts, load conventions/project context, report plugin budgets, and run SessionStart hooks.
7 skills · 2 commands · hooks
0
polymath-observability
claudeObservability concept plugin: RED/USE + logging + tracing design AND Datadog/Grafana/Honeycomb/Elastic/Sentry query integration.
9 skills
0
polymath-performance
claudePerformance craft: budgets, tail latency, caching (Redis and HTTP/edge), application profiling, high-load IO-bound design.
8 skills · 1 command
0
polymath-streaming
claudeData & streaming craft: Kafka and Event Hubs, stream processing, pipelines, lakehouse performance, lake layout, schema evolution.
9 skills
0
Similar plugins
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-federation
claudeCross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
sickn33/agentic-awesome-skills 49,620
duende-skills
claudecodexDuende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
anthropics/claude-plugins-official 47,076
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain polymath-security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins42 plugins