Scan a software repository for ISO 27001:2022 compliance of its software development controls (Annex A 8.4, 8.25–8.33). Produces a per-control compliance gap report covering source code access, secure SDLC, application security requirements, secure architecture, secure coding, security testing, outsourced development, environment separation, change management, and test data.
Plugin iso27001-sdlc from marketplace florianbuetow-plugins in florianbuetow/claude-code. Commands read from the repo's manifest — 1 month ago.
iso27001-sdlcScan a software repository for ISO 27001:2022 compliance of its software development controls. Produces a per-control compliance report covering Annex A controls 8.4, 8.25–8.33 (source code access, secure SDLC, application security requirements, secure architecture, secure coding, security testing,
Comprehensive application security toolbox for Claude Code. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker personas plus consolidator, and interactive security education.
62 skills · 7 agents · hooks
Scout a codebase to identify high-value work, plan the fixes (point and architectural), and produce a ranked map from codebase to tasks -- each tagged with a recommended model -- without ever implementing the fix. Cheap-model agents sweep and score every file by Impact x Opportunity (1-5); the router then runs meta-level pattern analysis, plans point and architectural fixes, and recommends a model per task. Team: target guard, skip gate, formula, profile, parallel scorers, ranker, pattern-grouper (meta-level analysis + architectural fix planning), task-writer (point-fix planning), model-recommender. Objectives: bugs, security, tech debt, dead code, performance, conversion.
1 command · 10 agents
Generate arc42 architecture documentation from a codebase. Scans the repo into a structured evidence base, then writes the 12 arc42 sections with Mermaid diagrams where the code gives high-confidence structure and explicit GAP flags where human input is needed (never fabricated). Knowledge base derived from arc42 under CC BY-SA 4.0.
1 skill · 4 commands · 3 agents
Export Claude Code session logs as standard LLM conversation JSON and human-readable TXT transcripts. Compact sessions into resumable context files. Recap recent sessions for quick context recovery. Identify current session, export individual sessions, batch-export all project sessions, or report token usage statistics.
7 skills
Stop hooks that terminate a Claude Code session when the agent's final message contains a kill phrase. Two scripts: single-kill (ends Claude) and double-kill (ends Claude plus the terminal shell that launched it), each bound to its own phrase. Installs at local (project) or global (user) scope; scripts require LOCAL or GLOBAL arg and exit 1 if missing. Contains-match (robust to model preambles), case-sensitivity configurable, and a kill path that walks the process tree to the owning claude (and, for double-kill, the top-most shell ancestor) and never signals pid <= 2. Install, remove, update, info, and whendone skills via a router; composes safely with existing Stop hooks.
6 skills
Critique, improve, and create Claude Code skills against one standard: a skill is a correction you got tired of making. Target the step that fails, use leading words that recruit training priors instead of coined terms, keep skills small and user-invoked, grow them only from observed corrections, and delete every instruction that does no work. critique reports findings with fixes and edits nothing; improve prunes no-ops, swaps explanation for leading words, and folds recurring corrections from session history in as one-sentence fixes; create mines session history for repeated corrections, checks overlap and default behavior before writing, and drafts a minimal skill. Subcommands: critique, improve, create.
4 skills
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Install the "AAS Secure App Builder" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.