blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
5
claude
secure-coding-practices
Secure coding: security-focused code review, injection prevention, secure authentication and session patterns, and targeted vulnerability fixes.
/
Plugin secure-coding-practices from marketplace libre-secops in Ormus-Solutions/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (2)
injection-preventionInjection prevention patterns for SQL, XSS, command injection, path traversal, LDAP, and template injection across major languages, including edge cases such as ORDER BY, IN clauses, and second-order injection. Use when writing or fixing code that builds queries, commands, paths, or HTML from input.
secure-auth-patternsAuthentication and session implementation patterns: password hashing, session cookie settings, JWT validation and its pitfalls, and access control checks, with language-specific examples. Use when building or reviewing login, sessions, tokens, or authorization code.
Slash commands (2)
/secure-coding-practices:fix-vulnFix a specific vulnerability in the provided code with root cause analysis, a corrected implementation, and verification steps.
/secure-coding-practices:secure-reviewRun a security-focused code review of the given files or snippet and report findings with vulnerable and fixed code side by side.
Subagents (2)
input-validation-specialistUse this agent when preventing or fixing a specific injection flaw: SQL or NoSQL injection, XSS by output context, command injection, path traversal, template injection (SSTI), XXE, LDAP, or CRLF injection. It names the injection context and gives the correct defense in the project's language; for b
secure-code-reviewerUse this agent when reviewing code for security before merge or release in Python, JavaScript/TypeScript, Java, Go, and other major languages: injection, broken access control and IDOR, authentication and session flaws, crypto misuse, data exposure, and race conditions. Each finding gives the vulner
More from Ormus-Solutions/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
5
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
5
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
5
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
5
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
5
Similar plugins
mattpocock-skills
claudeMatt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
mattpocock/skills 323,108
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
CMEM Pro
claudeCMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents
3 skills · 1 MCP server · hooks
thedotmack/claude-mem 116,618
agentic-flow
claudeagentic-flow (external: maintained in ruvnet/agentic-flow, pinned to commit d19737b, plugin 3.4.0): the agentic-flow MCP server pinned to [email protected] (ReasoningBank learning, ecosystem tools prompt_injection_scan, swarm_partition_tasks, sublinear_solve, sublinear_pagerank and ecosystem_status, multi-provider routing, autopilot learning; readonly profile by default, no tool pre-approved), 2 agents, 4 skills, /agentic-flow-status, and a mod guard on agentic_flow_agent with /agentic-flow-guard
4 skills · 1 command · 2 agents · 1 MCP server
ruvnet/ruflo 81,589
Open Code Review
codexUse Alibaba Open Code Review from local Codex.
2 skills
alibaba/open-code-review 50,068
Maintain secure-coding-practices?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins