blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
5
claude
supply-chain-security
Software supply chain security: dependency vulnerability and license audits, SBOM generation, and detection of typosquatting, dependency confusion, and compromised packages.
/
Plugin supply-chain-security from marketplace libre-secops in Ormus-Solutions/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (2)
dependency-risk-assessmentMethodology for scoring dependency risk across vulnerability history, maintainer health, dependency depth, license compatibility, and provenance, with a triage matrix, a new-dependency evaluation checklist, automated monitoring, and a pinning strategy. Use when deciding whether to adopt, update, or
sbom-generationReference for generating SPDX and CycloneDX SBOMs: NTIA minimum elements, Package URLs, Syft usage, CI generation in GitHub Actions, VEX enrichment, and diffing SBOMs between versions. Use when producing or automating SBOMs for compliance or release artifacts.
Slash commands (1)
/supply-chain-security:supply-chain-auditAudit a project's dependencies for known vulnerabilities, license risk, integrity issues, and maintainer health, optionally generating an SBOM.
Subagents (2)
dependency-auditorUse this agent when auditing a project's dependency tree for known vulnerabilities, license risk, or transitive exposure, or when an SBOM is needed. It checks npm, pip, Cargo, Go, Maven, NuGet, and other ecosystems against NVD, OSV, and the GitHub Advisory Database and generates SPDX or CycloneDX SB
package-integrity-analystUse this agent when a package may be malicious, typosquatted, or compromised, when checking for dependency confusion between private and public registries, or when verifying provenance. It inspects install scripts and maintainer changes for red flags and verifies signatures and attestations with Sig
More from Ormus-Solutions/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
5
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
5
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
5
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
5
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
5
Similar plugins
ruflo-security-audit
claudeSecurity review, dependency scanning, policy gates, and CVE monitoring
2 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
ai-plugins
claudeSet up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
12 skills · 11 agents · hooks
anthropics/claude-plugins-official 47,076
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
frontend-slides
claudeZero-dependency HTML presentation generator with safe presets, bold template-library styles, PPT conversion, and anti-AI-slop design philosophy.
1 skill
zarazhangrui/frontend-slides 32,274
45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.
48 skills · hooks
alirezarezvani/claude-skills 29,725
audit-context-building
claudeUnderstand a codebase before looking for bugs in it. Reads it function by function, records what each one assumes and depends on, and saves the write-ups to files instead of filling up the conversation.
1 skill · 1 agent
trailofbits/skills 8,166
Maintain supply-chain-security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins