claude

gizmoduck

Nuclei vulnerability scans on hosts and websites, or the whole scanner routine (checkov, trivy, dependency-check, semgrep, ZAP, testssl, nmap, nikto, gated sqlmap) from one manifest with a coverage table and a dated docs/security-scans layout, diffed against a baseline, rendered as triaged Markdown/HTML/PDF reports that itemise Critical/High/Medium and count the rest, and turned into ServiceDesk Plus tickets for Critical and High findings after one batch confirmation. No hooks, no agents.

3 on GitHubby Mattv0.5.11GPL-2.0-onlyupdated 2 days ago
/

Plugin gizmoduck from marketplace useful-claude-add-ons in mbadali25/useful-claude-add-ons. Commands read from the repo's manifest — 2 days ago.

What it installs

Skills (1)

  • gizmoduck

    Run a Nuclei vulnerability scan against a website, host, or list of targets, produce a triaged report, and open ServiceDesk Plus tickets for the serious findings after one batch confirmation. Use whenever the user wants to scan a new site they deployed, check a host or their environment for vulnerab

Slash commands (6)

  • /gizmoduck:diff

    Show what's new since a previous scan (regression / deploy check)

  • /gizmoduck:doctor

    Check the Gizmoduck toolchain (nuclei, templates, python, PDF)

  • /gizmoduck:report

    Regenerate a report from an existing findings file (no rescan)

  • /gizmoduck:scan

    Run a Nuclei scan on a target, then report + confirm-then-open SDP tickets

  • /gizmoduck:tickets

    Confirm batch, then open/sync SDP tickets from an existing findings file (no rescan)

  • /gizmoduck:update

    Update the Nuclei engine and community templates

View source on GitHub

More from mbadali25/useful-claude-add-ons

All 49 plugins →

crew

claude

Virtual dev team for multi-repo legacy work - one interactive session owns a ticket from brainstorm through spec, plan, implement, tests, docs and review to done; 4 context-isolated agents (explorer, reviewer, security, researcher), a Haiku 5.5 session-relay transport agent, plus on-demand stack skills, 41 slash commands, 33 bundled skills, and deterministic hooks: a budgeted context hook (on by default) that carries the handoff across a clear or compaction, plan-approval and scope guards with a completion audit, an opt-in cloud/destructive guard, and a verify gate that fails unverified turns. /crew:migrate carries a 0.20 setup forward.

33 skills · 41 commands · 5 agents · hooks

3

Make one or more Obsidian vaults Claude Code's durable, token-efficient memory - cross-platform, multi-vault setup and health checks for the Local REST API bridge (one MCP server per vault), a vault contract guard whose frontmatter and ASCII rules ship off and whose canvas shape check ships on, gardening and reflection agents, canvas and map-of-content generation, and graphify wiring into a separate codegraphs vault.

3 skills · 11 commands · 2 agents · hooks

3

localgpu

claude

Local models on your own GPU via Ollama, in two halves - three MCP tools that index a repo or folder into a vector store on disk, search it, and answer from it, plus a `localgpu` command that opens a separate Claude Code session on a local chat model through a translating proxy. Commands for setup, health checks, indexing, search, ask, and pointing crew at a local model. No hooks and no agents; no prompt, file, or embedding leaves the machine.

1 skill · 6 commands

3

Two adversarial reviewers from different model families - a Claude agent and a Codex agent - tear apart a Claude Code agent, skill or plugin against one shared rubric and return a viability verdict with cited defects, weaknesses and the edits worth making. Use when reviewing a skill, agent, command or plugin as an artifact: 'is this skill worth shipping', 'tear apart this plugin', 'will this agent's description actually trigger', 'review my SKILL.md', 'does this duplicate something we already have'. Coverage is a reported outcome: if only one reviewer runs, or the two models cannot be resolved to different families, the report says so in its own title rather than passing a single-family opinion off as two. Do NOT use for architecture, implementation plans, product ideas or code diffs - use crew's architect-reviewer, planner or code-reviewer. Standalone - its own two-model config, never crew's. No hooks.

2 commands · 1 agent

3

notify

claude

Notify a session's progress to your phone or inbox - a two-way Telegram bot (questions wait for your reply, topic-per-job dispatcher) or email over SMTP/an MCP connector.

1 skill · 1 command

3

Peer messaging between Claude Code sessions across machines - a self-hosted WebSocket bridge, an MCP client per session, a hook that wakes an idle session on a new message, and busy/idle/waiting state hooks its installer writes into your settings. Hardened fork of Peuqui/AI-Connect (MIT): per-peer tokens, no name takeover, peer content framed as untrusted, VPN-scoped listener. The watcher hook runs once installed and is silent until the plugin's own installer has run; that installer registers the MCP server and the state hooks.

hooks

3

Maintain gizmoduck?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins49 plugins