claudecodex

ops-appsec

Application and code security assessment workflows for Specter Codex.

742 on GitHubby SpecterOpsv0.1.0Apache-2.0updated 7 days agosecurity
/

Plugin ops-appsec from marketplace specterops-skills in SpecterOps/skills. Commands read from the repo's manifest — 6 days ago.

What it installs

Skills (3)

  • secret-scan

    Scan repositories and codebases for exposed secrets, credentials, and sensitive data. Use for GitHub repo/org/user scans, local code scans, and secret-discovery triage with optional command execution.

  • security-review

    Perform a security-focused review of current git changes. Use when reviewing staged/unstaged diffs, checking for vulnerabilities, and deciding merge readiness.

  • webapp-review

    Web application security testing workflow and checklist generation. Use when planning or executing web app assessment steps, including auth, API, injection, and configuration testing.

View source on GitHub

More from SpecterOps/skills

All 25 plugins →

bloodhound

claudecodex

BloodHound, AzureHound, GitHound/JamfHound/OktaHound OpenGraph attack-path query workflows, SCIM bridge references, and optional BloodHound MCP packaging.

9 skills

742

report-timeline

claudecodex

Report timeline ingestion, consolidation, and evidence packaging workflows.

8 skills

742

Social engineering research and phishing pretext workflows.

6 skills

742

Development scaffolding, repository hygiene, security tooling, and implementation workflows for Specter Codex.

6 skills

742

c2-cobaltstrike

claudecodex

Cobalt Strike operations, Aggressor Script, Sleep, BOF loader, and Malleable C2 profile workflows.

4 skills

742

go-review

claudecodex

Security review for Go packages and services covering trust boundaries, injection, filesystem, crypto, concurrency, and unsafe/cgo edges

1 skill · 3 agents

742

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain ops-appsec?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins25 plugins