recon-active

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry

2 skills · 1 command · 1 agent

Connect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.

34 skills · 3 agents · 3 MCP servers · hooks

Evidence-backed BioPharma research workflows over Maven Bio's drug, trial, company, and deal knowledge graph. Skills for competitive pipelines, indication landscapes, asset profiles, deal and financing activity, and evidence synthesis grounded in FDA, SEC, clinical, and press sources. Requires a Maven Bio account.

16 skills · 1 agent · 1 MCP server

Get medical device software through IEC 62304 and IEC 81001-5-1. Four deterministic stdlib scripts: a software safety classifier (62304 4.3 with A1 external controls and segregation) that also sets the FDA Basic/Enhanced documentation level and flags 524B cyber devices; a lifecycle gap check scoped by class, with IEC 81001-5-1 security activities; a SOUP register check with SBOM cross-check; and a trace matrix release gate. Ships cs-device-software-lead agent, /cs-medical-device-software and /cs-soup-review commands and 4 references with per-claim confidence levels.

1 skill · 2 commands · 1 agent

Real-time statusline showing context usage, active tools, running agents, and todo progress. Always visible below your input, zero config required.

1 skill

Looks up curated web security learning resources (XSS, SQLi, CSRF, SSRF, OAuth/JWT, recon, evasion, tools, CTF). Filters by topic, difficulty, language, and resource type. Returns top references with archive fallbacks. Defensive use only; refuses unauthorized targeting.

1 skill