claude

security-knowledge

Shared reference packs for consistent mapping: MITRE ATT&CK lookup, OWASP Top 10 families (Web/API/LLM/Mobile), and cross-framework crosswalks (CWE, NIST, CIS, ISO 27001).

11 on GitHubby Jassicsv0.2.1GPL-3.0updated 3 months agocore
/

Plugin security-knowledge from marketplace awesome-claude-security in jassics/awesome-claude-security. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (5)

  • asvs-reference

    Look up the right OWASP ASVS (Application Security Verification Standard) v5.0 chapter and verification level (L1/L2/L3) for a control, requirement, or finding. Use when a design review, secure-code review, or pentest finding needs a consistent ASVS citation, or when scoping how deep a verification

  • attack-lookup

    Look up MITRE ATT&CK tactics, techniques, and mitigations, and map an observed behavior, finding, or detection to the right technique ID(s). Use whenever work needs a consistent ATT&CK reference — detection coverage, threat reports, red-team TTP planning, or tagging a finding.

  • framework-mapping

    Map a finding, control, or requirement across security frameworks — CWE, NIST CSF & SP 800-53, CIS Controls, ISO/IEC 27001 — so one piece of work can be expressed in whichever framework the audience uses. Use when a finding needs a CWE, or when aligning controls/gaps across compliance frameworks.

  • owasp-reference

    Look up and map to the right OWASP Top 10 family — Web, API, LLM, or Mobile — and give the canonical category ID/name for a finding. Use when you need a consistent OWASP reference for tagging findings, scoping a review, or aligning a report across the appsec/genai plugins.

  • secure-coding-kb

    Look up the safe idiom and known-risky API/library for a language or framework (Python, JS/TS/Node, Java, Go, C/C++, Ruby) before or while writing code — a design/build-time cheat-sheet, distinct from post-hoc scanning. Use when writing or reviewing code, scoping a PRD's tech stack, or advising an A

View source on GitHub jassics.github.io

More from jassics/awesome-claude-security

All 45 plugins →

ai-safety

claude

AI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance.

6 skills · 1 agent

11

Security for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency.

6 skills

11

CISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling.

3 skills · 1 command · 1 agent

11

grc

claude

Governance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming.

3 skills · 1 command · 1 agent

11

Security architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack.

3 skills · 1 command · 1 agent

11

Attack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based).

5 skills

11

Similar plugins

superpowers

claudecodex

Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques

15 skills · hooks

obra/superpowers 316,836

hyperframes

claudecodex

Recommended: all published HyperFrames skills in one versioned bundle. Create and render videos from HTML: the contract, film, captions, overlays, motion and look references, the CLI, the registry, media, Figma, slideshows and Remotion ports.

22 skills

heygen-com/hyperframes 83,516

Core Ruflo MCP tools, commands, and Claude Code orchestration patterns

5 skills · 2 commands · 4 agents · 1 MCP server · hooks

ruvnet/ruflo 81,589

Install the "Essentials" workflow plugin from Agentic Awesome Skills.

5 skills

sickn33/agentic-awesome-skills 49,620

aws-core

claudecodex

Build, deploy, and operate applications on AWS. Skills to author infrastructure-as-code, use core services, and complete common tasks.

27 skills · 1 MCP server

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security-knowledge?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins45 plugins