claude

sast-sca

Static analysis (SAST) and software composition analysis (SCA): run/triage code scans, dependency/SBOM analysis, and prioritize findings.

11 on GitHubby Jassicsv0.2.1GPL-3.0updated 3 months agodomain
/

Plugin sast-sca from marketplace awesome-claude-security in jassics/awesome-claude-security. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (3)

  • sast-review

    Run or ingest static application security testing (SAST) results on a codebase, triage them to remove false positives, and confirm the real issues with code evidence and remediation. Use when reviewing source code for security flaws or cleaning up noisy scanner output.

  • sca-review

    Analyze a project's dependencies (software composition analysis): generate/inspect an SBOM, find known-vulnerable and risky components, and prioritize upgrades. Use when reviewing third-party/open-source risk in a codebase or build.

  • secure-review

    Manual, adversarial secure code review focused on exploitable vulnerabilities — OWASP Top 10, injection, authn/authz, business-logic abuse, crypto, SSRF, deserialization, secrets, race conditions. Reviews the current git diff by default, or a path/PR. Supports phase-scoped commands (auth, bizlogic,

View source on GitHub jassics.github.io

More from jassics/awesome-claude-security

All 45 plugins →

ai-safety

claude

AI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance.

6 skills · 1 agent

11

Security for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency.

6 skills

11

CISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling.

3 skills · 1 command · 1 agent

11

grc

claude

Governance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming.

3 skills · 1 command · 1 agent

11

Security architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack.

3 skills · 1 command · 1 agent

11

Attack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based).

5 skills

11

Similar plugins

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

ruflo-ddd

claudecodex

Domain-Driven Design scaffolding — bounded contexts, aggregate roots, domain events, and anti-corruption layers

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "Architecture & Domain Modeling" editorial skill bundle for Claude Code.

13 skills

sickn33/agentic-awesome-skills 49,620

Connect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.

34 skills · 3 agents · 3 MCP servers · hooks

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Hostinger

claude

Deploy, manage and monitor Hostinger services — Websites, Domains, Ecommerce, Email Marketing, Subscriptions & Payments, and VPS. Authenticate via browser (OAuth) or API token.

7 skills · 1 MCP server

anthropics/knowledge-work-plugins 35,601

Maintain sast-sca?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins45 plugins