CI/CD Integration
claudeStage design, quality gates, sharding, working GitHub Actions, Azure DevOps and Jenkins pipelines, artefacts, secrets and debugging.
7 skills · 1 agent
0
claude
Shift-Left Security
STRIDE threat modelling, security acceptance criteria, scanner triage and testing boundaries.
/
Plugin qa-shift-left-security from marketplace qz-agent-clusters in Qualizeal/skills. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (4)
scanner-triageRank SAST, DAST and dependency findings by reachability, exploitability, impact and fix cost, with evidence attached to every deprioritisation and false positive. Use when working through scanner output.
security-acceptance-criteriaWrite security requirements as Given/When/Then acceptance criteria so they enter the traceability matrix and get tested rather than discussed. Use when turning a threat model into testable requirements.
security-testing-boundariesWhat security testing must never produce — exploit code, discovered secrets in reports, tests against production or third-party systems — and the required output structure. Use before writing or publishing any security finding.
stride-threat-modellingWork STRIDE against each data flow at requirements time — spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege. Use during design or BRD review, before any code exists.
Subagents (1)
shift-left-securityPerforms threat modelling at requirements time and interprets SAST/DAST/dependency scan output, ranking findings by exploitability with comparative context. Use during design review, when triaging scanner output, or when asked about security testing.
More from Qualizeal/skills
All 15 plugins →Test Case Design
claudeEquivalence partitioning, boundary values, decision tables, state transition, pairwise, negative and permission testing, level assignment and traceability.
7 skills · 1 agent
0
Knowledge Fabric
claudeIngestion, tagging, chunking, redaction and retrieval quality auditing for the shared RAG knowledge store.
5 skills · 1 agent
0
Performance Testing
claudeWorkload modelling, SLO definition, test type selection, bottleneck analysis and honest reporting.
5 skills · 1 agent
0
Playwright Automation
claudeOperating rules, framework architecture, locator strategy, script generation and the Playwright MCP browser loop.
5 skills · 1 agent
0
Synthetic Test Data
claudeSchema derivation, referential integrity, edge-case distribution, regulatory profiles and lineage. No production PII, ever.
5 skills · 1 agent
0
Similar plugins
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-federation
claudeCross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
agentic-bundle-aas-security-engineer
claudecodexInstall the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
sickn33/agentic-awesome-skills 49,620
gitnexus
claudecodexCode intelligence powered by a knowledge graph. Provides execution flow tracing, blast radius analysis, and augmented search across your codebase.
12 skills · 1 MCP server · hooks
abhigyanpatwari/GitNexus 48,482
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain Shift-Left Security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins15 plugins