ai-safety
claudeAI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance.
6 skills · 1 agent
11
claude
supply-chain-security
Software supply-chain security: dependency trust review (typosquatting/dependency-confusion/maintainer risk), artifact provenance & signing (SLSA/Sigstore), and CI/CD pipeline integrity.
/
Plugin supply-chain-security from marketplace awesome-claude-security in jassics/awesome-claude-security. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (4)
artifact-provenance-verificationAssess and establish build artifact provenance and integrity — SLSA provenance level, signing/attestation (Sigstore/cosign, in-toto), and verification at deploy/admission. Use when you need to prove an artifact (container image, package, binary) came from the expected source and build, untampered.
dependency-supply-chain-reviewReview third-party dependencies for supply-chain trust risk — typosquatting, dependency confusion, maintainer/abandonment risk, unpinned versions, and malicious install scripts — not just known-CVE counts. Use when assessing how much a project trusts code it didn't write, or vetting a new dependency
pipeline-integrity-reviewReview a CI/CD pipeline for supply-chain tampering risk — build isolation, runner/agent trust, secret exposure, mutable dependencies, and poisoned-pipeline (PPE) / unauthorized-workflow paths. Use when hardening GitHub Actions, GitLab CI, Jenkins, or similar against build-system compromise.
pipeline-timeout-lintCheck GitHub Actions workflows for the two runaway-risk controls that have no safe platform default — a job with no `timeout-minutes`, and a workflow with no `concurrency` group. Use when authoring or reviewing a `.github/workflows/*.yml` file, before merging a new/changed pipeline, or when asked "w
More from jassics/awesome-claude-security
All 45 plugins →agentic-ai-security
claudeSecurity for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency.
6 skills
11
ciso-toolkit
claudeCISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling.
3 skills · 1 command · 1 agent
11
grc
claudeGovernance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming.
3 skills · 1 command · 1 agent
11
security-architect
claudeSecurity architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack.
3 skills · 1 command · 1 agent
11
security-diagramming
claudeAttack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based).
5 skills
11
Similar plugins
mattpocock-skills
claudeMatt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
mattpocock/skills 323,108
superpowers
claudecodexCore skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
15 skills · hooks
obra/superpowers 316,836
ruflo-ddd
claudecodexDomain-Driven Design scaffolding — bounded contexts, aggregate roots, domain events, and anti-corruption layers
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "Architecture & Domain Modeling" workflow plugin from Agentic Awesome Skills.
13 skills
sickn33/agentic-awesome-skills 49,620
cockroachdb
claudeConnect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.
34 skills · 3 agents · 3 MCP servers · hooks
anthropics/claude-plugins-official 47,076
documentation-standards
claudecodexHADS (Human-AI Document Standard) — semantic tagging convention for docs that work for both humans and AI models — plus the grounded-vault pattern for provenance-linked, drift-checked knowledge stores.
2 skills
wshobson/agents 42,461
Maintain supply-chain-security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins45 plugins