claude

common-security

Common security practices: API security, secrets detection, secure code review, CSRF, security headers, JWT. 6 skills.

6 on GitHubby latestaiagentsv2.1.0MITupdated 9 days agoSecurity
/

Plugin common-security from marketplace latestaiagents in latestaiagents/agent-skills. Commands read from the repo's manifest — 8 days ago.

What it installs

Skills (6)

  • api-security

    Comprehensive API security for REST and GraphQL APIs. Use this skill when building or reviewing API endpoints, implementing authentication, or securing data transfer. Activate when: API security, REST security, GraphQL security, API authentication, API rate limiting, API versioning, secure endpoint,

  • csrf-protection

    Cross-Site Request Forgery prevention techniques. Use this skill when implementing forms, state-changing operations, or reviewing CSRF protections. Activate when: CSRF, cross-site request forgery, form security, token validation, same-site cookie, state changing request, POST request security.

  • jwt-security

    JSON Web Token security best practices. Use this skill when implementing JWT authentication, validating tokens, or reviewing JWT usage. Activate when: JWT, JSON Web Token, token authentication, bearer token, refresh token, token validation, JWT secret, token expiry.

  • secrets-detection

    Find and prevent leaked secrets, API keys, and credentials in code. Use this skill when reviewing code for exposed secrets, setting up pre-commit hooks, or auditing repositories. Activate when: leaked secret, API key exposed, credentials in code, hardcoded password, secret scanning, git secrets, pre

  • secure-code-review

    Systematic security code review methodology. Use this skill when reviewing pull requests for security issues, auditing critical code paths, or performing security assessments. Activate when: security review, code audit, secure code, review PR for security, find vulnerabilities, security assessment.

  • secure-headers

    HTTP security headers configuration guide. Use this skill when hardening web applications, configuring CSP, or setting up security headers. Activate when: security headers, CSP, Content-Security-Policy, HSTS, X-Frame-Options, CORS headers, clickjacking prevention, helmet.

View source on GitHub latestaiagents.com

More from latestaiagents/agent-skills

All 29 plugins →

developer-toolkit

claude

Developer plugin: the 19 developer skills + 2 commands. MCP servers: GitHub, Sentry, Linear, Atlassian (each needs your own account).

19 skills · 2 commands · 4 MCP servers

6

security-guardian

claude

Security plugin: all 16 security skills (OWASP-category and common practices) + 2 commands. MCP server: GitHub. For the same skills without commands or MCP, install the security entry.

16 skills · 2 commands · 1 MCP server

6

devops-sre

claude

DevOps/SRE plugin: incident response, runbooks, on-call, Kubernetes troubleshooting, observability, SLOs. 8 skills + 6 commands. MCP servers: Datadog, PagerDuty, GitHub (each needs your own account).

8 skills · 6 commands · 3 MCP servers

6

agent-plugin

claude

Multi-agent plugin: the 13 agent-architect skills + 2 commands (design-agent, debug-agent). No MCP servers.

13 skills · 2 commands

6

agent-architect

claude

Multi-agent system design: supervisor and mesh patterns, handoffs, memory, tool routing, error recovery, cost budgets, testing, LangGraph, durable state, human-in-the-loop, checkpointing, A2A. 13 skills. Same skills as agent-plugin, without its commands.

13 skills

6

qa-testing

claude

QA/Testing plugin: test strategy, test writing, Playwright automation, API and performance testing. 6 skills + 3 commands. MCP servers: BrowserStack, Atlassian, GitHub (each needs your own account).

6 skills · 3 commands · 3 MCP servers

6

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

agentdb

claude

AgentDB (external: maintained in ruvnet/agentdb, pinned to commit 27678c3, plugin 3.6.0): agentdb's own standalone MCP server pinned to [email protected] (vector memory with get/list/update/delete for records, patterns and skills, hybrid keyword + vector episode search and an opt-in local cross-encoder, an opt-in aidefence injection guard on memory writes, reflexion, skills, outcome feedback, capabilities report), a memory-specialist agent, 3 skills, /agentdb-status, and the agentdb mod guard that keeps secrets out of memory and refuses delete/reset unless allowed. Complements ruflo-agentdb, which reaches AgentDB through ruflo's server

3 skills · 1 command · 1 agent · 1 MCP server

ruvnet/ruflo 81,589

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain common-security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins29 plugins