claudecodex

42crunch-api-security-testing

使用 42Crunch 在 Claude Code 中直接实现 API 安全自动化——自动审计 OpenAPI 规范，检测与 OWASP API 安全风险（包括 BOLA/BFLA）对齐的漏洞，并应用 AI 驱动的修复。专为 AI 辅助开发工作流设计，通过审计->扫描->修复->验证循环提供持续防护，确保 API 在部署前满足企业安全标准。

2 on GitHubby 42Crunchv1.5.5Apache 2.0updated yesterdaydeveloper-tools
/

Plugin 42crunch-api-security-testing from marketplace kael-odin-plugins-zh in kael-odin/claude-plugins-zh. Commands read from the repo's manifest — today.

What it installs

Skills (5)

  • 42crunch-api-security-testing

    Run both a 42Crunch Audit and a live Scan together in a single pipeline. Use this skill when the user wants to run audit and scan together, complete the full security pipeline, or when the request is ambiguous about which phase to run. Triggers on phrases like "run audit and scan", "full 42crunch pi

  • 42crunch-audit

    Run a 42Crunch API Security Audit and fix SQG-blocking issues in an OpenAPI Specification file. Use this skill whenever the user wants to audit an OAS file for security issues, fix SQG-blocking issues, score an API, apply data dictionary enrichment, or remediate audit findings. Triggers on phrases l

  • 42crunch-scan

    Run a 42Crunch live conformance and authorization scan against an API and fix SQG-blocking scan findings. Use this skill whenever the user wants to run a conformance test, authorization scan, BOLA test, BFLA test, generate or configure a scan config, or fix scan-reported issues. Triggers on phrases

  • 42crunch-setup

    Set up the 42Crunch environment so that audit and scan skills can run without friction. Use this skill whenever the user wants to configure 42Crunch for the first time, install or update the 42c-ast binary, configure an API key, or troubleshoot missing credentials or binary errors. Triggers on phras

  • code-to-oas

    Analyze an entire API codebase and generate an accurate OpenAPI Specification (OAS 3.0) file from the source code. Use this skill whenever the user wants to generate, create, or derive an OpenAPI spec from code, reverse-engineer an API definition, or document an existing API. Triggers on phrases lik

View source on GitHub 42crunch.com

More from kael-odin/claude-plugins-zh

All 319 plugins →

azure

claudecodex

将 Claude 打造成 Azure 专家。本插件集成了 Azure MCP server 和专业 Azure skills，助你摆脱泛泛而谈的建议。它让 Claude 能够执行实际任务：列出资源、验证部署、诊断基础设施问题，并优化 50+ 项 Azure 服务的成本。

44 skills · 1 MCP server

2

cockroachdb

claudecodex

将 Claude Code 直接连接到你的 CockroachDB 集群，进行实操数据库工作——探索 schema、编写优化的 SQL、调试查询，并管理分布式数据库集群。该插件提供 14 个工具，涵盖两个活跃的 MCP 后端（自托管 MCP Toolbox 和托管式 CockroachDB Cloud MCP Server）、三个专用 agent（DBA、Developer、Operator）、覆盖 6 个运维领域的 32 个 skill，以及内置安全 hook。

34 skills · 3 agents · 3 MCP servers · hooks

2

databricks

claudecodex

面向 CLI、Apps、Lakebase、Model Serving、Lakeflow Jobs、Spark Declarative Pipelines、Declarative Automation Bundles（DAB）以及经典版到无服务器迁移的 Databricks skill。

37 skills · 2 commands · hooks

2

clay

claudecodex

在 Claude Code 中使用 Clay：设置并登录 clay CLI，查询和分析 Clay 表格，在 Clay 的 GTM 数据库中搜索人员和公司，管理受众、信号、例程和工作流，并起草和审阅 Sequencer 营销活动。包含自动批准该插件自身 clay CLI 调用和 Clay skills 的 hooks；需要 Clay 账户。

38 skills · hooks

2

amplitude

claudecodex

将 Amplitude 作为专业分析工具使用——埋点接入 Amplitude、发现产品机会、分析图表、创建仪表盘、管理实验，并洞察用户与账户。

36 skills · 1 MCP server

2

data-agent-kit

claudecodex

本插件为在 Google Cloud 上工作的数据工程师与数据库从业者提供一套专用技能，相当于一位专家助手：在常用的编码代理里用自然语言描述需求，即可设计复杂的数据管道、用 dbt 转换数据、编写 Spark 与 BigQuery SQL 笔记本，并在 GCP 数据生态中编排端到端工作流。

37 skills

2

Similar plugins

impeccable

claude

Design fluency for frontend development. 1 skill with 24 commands (/impeccable polish, /impeccable audit, /impeccable critique, etc.) and curated anti-pattern detection.

1 skill · 4 agents · hooks

pbakaus/impeccable 109,099

career-ops

claudecodex

Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications

5 skills · hooks

career-ops-hq/career-ops 82,253

ruflo-metaharness

claude

MetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint

13 skills · 1 command · 1 agent · hooks

ruvnet/ruflo 81,589

academic-research-skills

claude

5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.

5 skills · 16 commands · 4 agents · hooks

Imbad0202/academic-research-skills 56,698

slidev

claude

Claude Code skill for creating and presenting Slidev slidedecks

1 skill

slidevjs/slidev 49,452

ai-plugins

claude

Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain

12 skills · 11 agents · hooks

anthropics/claude-plugins-official 47,076

Maintain 42crunch-api-security-testing?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins319 plugins