ai-safety
claudeAI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance.
6 skills · 1 agent
11
claude
secure-coding
Secure-coding enforcement for Python and React/JS: flags outdated/vulnerable functions with a safe alternative (curated CWE/OWASP-ASVS rule pack + Semgrep), and blocks commits/pushes carrying secrets, cloud keys, or sensitive config via both a Claude Code hook and installable real git hooks.
/
Plugin secure-coding from marketplace awesome-claude-security in jassics/awesome-claude-security. Commands read from the repo's manifest — 1 month ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
What it installs
Skills (2)
safe-function-lintScan Python or React/JS code for outdated, banned, or vulnerable functions/methods (eval, pickle.loads, subprocess shell=True, dangerouslySetInnerHTML, md5 for passwords, etc.) and propose the exact safe alternative for each hit. Use when reviewing a diff/PR, before a commit, or when the user asks "
secret-guardDetect hardcoded secrets, cloud keys (AWS/GCP/Azure), tokens, .env files, and sensitive config before they're committed or pushed, and verify .gitignore covers the patterns that must never be tracked. Use when the user is about to commit/push, asks "did I leak a secret", "check for hardcoded keys",
Subagents (1)
secure-coding-guardianUse this agent for a dedicated secure-coding review of Python or React/JS code — flagging outdated/vulnerable functions with concrete safe alternatives, catching hardcoded secrets and cloud keys, and checking .gitignore hygiene — before a commit or PR. Distinct from the general-purpose deep-code-ana
Hooks (1)
- PreToolUse
python3 "$CLAUDE_PLUGIN_ROOT/scripts/pretooluse-guard.py"
More from jassics/awesome-claude-security
All 45 plugins →agentic-ai-security
claudeSecurity for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency.
6 skills
11
ciso-toolkit
claudeCISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling.
3 skills · 1 command · 1 agent
11
grc
claudeGovernance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming.
3 skills · 1 command · 1 agent
11
security-architect
claudeSecurity architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack.
3 skills · 1 command · 1 agent
11
security-diagramming
claudeAttack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based).
5 skills
11
Similar plugins
mattpocock-skills
claudeMatt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
mattpocock/skills 323,108
ui-ux-pro-max
claudeProfessional UI/UX design intelligence for AI coding assistants. Includes searchable databases of styles, colors, typography, charts, and UX guidelines for React, Next.js, Astro, Vue, Nuxt.js, Nuxt UI, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui, Jetpack Compose, Angular, Laravel, JavaFX, and Three.js.
7 skills
nextlevelbuilder/ui-ux-pro-max-skill 148,759
nextjs
claudeOfficial Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.
6 skills
vercel/next.js 143,495
ruflo-ddd
claudecodexDomain-Driven Design scaffolding — bounded contexts, aggregate roots, domain events, and anti-corruption layers
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
headroom-skill
claudeSkill: add headroom-ai compress() to a Python or TypeScript app to cut LLM input tokens (tool outputs, logs, JSON, chat history). No API key.
1 skill
headroomlabs-ai/headroom 79,508
ppt-master
claudeGenerate natively editable PPTX from PDF / DOCX / URL / Markdown — real DrawingML shapes, text boxes, charts, and animations. Note: run `pip install -r requirements.txt` inside the installed plugin directory for the Python post-processing scripts to work.
1 skill
hugohe3/ppt-master 76,375
Maintain secure-coding?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins45 plugins