author-detections
claudeCatch a pattern nothing else catches — author a custom, tested xgrep/Semgrep detection rule (including taint-mode dataflow), or port a rule to new languages
1 skill · 1 command
4
claude
triage-findings
Decide whether a security finding is real — classify xgrep scan results as true or false positives by tracing dataflow and call chains with the code graph
/
Plugin triage-findings from marketplace secure-stack in mondoohq/secure-stack. Commands read from the repo's manifest — 21 days ago.
What it installs
Skills (1)
triage-findingsDecide whether a security finding is real — classify xgrep scan results as true or false positives by tracing dataflow from source to sink and mapping call chains with the code graph. Use to triage SAST findings before fixing, cut false positives, or confirm a vulnerability is exploitable.
Slash commands (1)
/triage-findings:triage-findingsScan a codebase with xgrep and classify every finding as true or false positive, with evidence from the code graph
More from mondoohq/secure-stack
All 11 plugins →fix-findings
claudeFix xgrep security findings and prove each fix holds — one finding or a whole set (or the triage-confirmed true positives) — through the verify/apply harness
1 skill · 1 command
4
secure-ai-services
claudeSecure AI services and AI tooling — scan OpenAI, Anthropic, vLLM, Databricks AI, and vector stores with cnspec, and govern approved AI agents/IDE-extensions/MCP servers, mapped to the OWASP LLM Top 10
1 skill · 1 command
4
secure-cloud
claudeAudit cloud account security posture — scan AWS, Azure, GCP, and Kubernetes against CIS foundations and Mondoo cloud policies with cnspec
1 skill · 1 command
4
secure-coding
claudeWrite it safely — avoid vulnerable patterns across 7 languages, aligned to OWASP Top 10:2025 and the OWASP Top 10 for LLM & GenAI 2025
1 skill · 1 command
4
secure-os
claudeAudit and harden operating systems and network devices — scan a Linux/macOS/Windows host, container image, or network device against CIS/vendor benchmarks with cnspec
1 skill · 1 command
4
Similar plugins
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-federation
claudeCross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.
12 skills
sickn33/agentic-awesome-skills 49,620
duende-skills
claudecodexDuende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
anthropics/claude-plugins-official 47,076
incident-response
claudecodexProduction incident management, triage workflows, and automated incident resolution
4 skills · 2 commands · 6 agents
wshobson/agents 42,461
Maintain triage-findings?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins11 plugins