ai-safety
claudeAI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance.
6 skills · 1 agent
11
claude
web-app-security
Web application security testing: OWASP Web Top 10 assessment, access-control/IDOR testing, and injection testing.
/
Plugin web-app-security from marketplace awesome-claude-security in jassics/awesome-claude-security. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (3)
access-control-testTest a web app's authorization: IDOR/BOLA, missing function-level access control, privilege escalation (horizontal and vertical), and forced browsing. Use to validate OWASP A01 on an authorized target — the most prevalent web risk.
injection-testTest a web app for injection flaws — SQL/NoSQL, OS command, LDAP, template injection, and cross-site scripting (XSS). Use to validate OWASP A03 on an authorized target by probing where untrusted input reaches an interpreter or sink.
owasp-web-top10Assess a web application against the OWASP Top 10 (2021), producing a per-category finding set with severity and remediation. Use when reviewing or pentesting a web app for the most common, highest-impact web risks. Authorized testing only.
More from jassics/awesome-claude-security
All 45 plugins →agentic-ai-security
claudeSecurity for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency.
6 skills
11
ciso-toolkit
claudeCISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling.
3 skills · 1 command · 1 agent
11
grc
claudeGovernance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming.
3 skills · 1 command · 1 agent
11
security-architect
claudeSecurity architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack.
3 skills · 1 command · 1 agent
11
security-diagramming
claudeAttack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based).
5 skills
11
Similar plugins
mattpocock-skills
claudeMatt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
mattpocock/skills 323,108
example-skills
claudeCollection of example skills demonstrating various capabilities including skill creation, MCP building, visual design, algorithmic art, internal communications, web testing, artifact building, Slack GIFs, and theme styling
19 skills
anthropics/skills 193,780
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-ddd
claudecodexDomain-Driven Design scaffolding — bounded contexts, aggregate roots, domain events, and anti-corruption layers
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
pake
claudecodexPackage any website or local web build into a lightweight desktop app with Pake CLI.
1 skill
tw93/Pake 63,463
agent-browser
claudeAutomates browser interactions for web testing, form filling, screenshots, and data extraction
12 skills
vercel-labs/agent-browser 50,373
Maintain web-app-security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins45 plugins