sdlc-cross-role
claudeCross-functional SDLC workflows: phase gates, definitions of ready/done, feature lifecycle, release checklists, incident-to-improvement, compliance traceability. Grounded in ISO/IEC 12207, 15288.
8 skills · 8 commands
48
claude
security-application-security
SAST, DAST, dependency scanning, penetration test scoping, API security review.
/
Plugin security-application-security from marketplace claude-skills in sethdford/claude-skills. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (8)
api-security-reviewReview API security including authentication, authorization, rate limiting, input validation, and data exposure.
content-security-policyDesign and deploy Content-Security-Policy (CSP) to prevent XSS attacks and unauthorized resource loading.
dast-test-planDesign and execute Dynamic Application Security Testing (DAST) test plans to find runtime vulnerabilities in web applications.
dependency-vulnerability-scanScan application dependencies for known vulnerabilities and manage security updates across supply chain.
penetration-test-scopeDefine penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.
sast-configurationConfigure and deploy Static Application Security Testing (SAST) tools to find vulnerabilities in source code during development.
security-test-planDevelop comprehensive security test plans covering functional security, vulnerability scanning, and attack scenarios.
web-security-headersConfigure security HTTP headers to mitigate XSS, clickjacking, MIME sniffing, and other browser-based attacks.
Slash commands (3)
/security-application-security:review-api-securityAudit API design, authentication, rate limiting, and input validation for security gaps.
/security-application-security:scan-dependenciesScan application dependencies for known vulnerabilities and create remediation roadmap.
/security-application-security:test-securityExecute comprehensive security testing including SAST, DAST, and penetration testing.
More from sethdford/claude-skills
All 57 plugins →architect-system-design
claudeArchitecture patterns, system decomposition, DDD, microservices, event-driven, CQRS. Grounded in TOGAF, IASA BTABoK, ISO 42010.
10 skills · 4 commands
48
designer-research
claudeUser research: personas, empathy maps, journey maps, interviews, usability testing, JTBD.
10 skills · 4 commands
48
engineer-code-quality
claudeClean code, refactoring, SOLID principles, code smell detection, complexity analysis.
10 skills · 4 commands
48
pm-discovery
claudeProblem discovery, customer research, opportunity assessment, assumption mapping.
10 skills · 4 commands
48
designer-ui-design
claudeUI design: color systems, typography, layout grids, responsive design, data viz.
9 skills · 4 commands
48
Similar plugins
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-federation
claudeCross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
sickn33/agentic-awesome-skills 49,620
duende-skills
claudecodexDuende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
anthropics/claude-plugins-official 47,076
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain security-application-security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins57 plugins