sdlc-cross-role
claudeCross-functional SDLC workflows: phase gates, definitions of ready/done, feature lifecycle, release checklists, incident-to-improvement, compliance traceability. Grounded in ISO/IEC 12207, 15288.
8 skills · 8 commands
48
claude
security-secure-development
Secure coding review, OWASP Top 10, authentication/authorization design, cryptography.
/
Plugin security-secure-development from marketplace claude-skills in sethdford/claude-skills. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (9)
authentication-designDesign secure authentication systems with strong password policies, MFA, secure password reset, and session management.
authorization-designDesign authorization systems (access control, role-based permissions, principle of least privilege) to enforce fine-grained access policies.
cryptography-selectionSelect appropriate cryptographic algorithms and parameters for encryption, hashing, key derivation, and digital signatures.
input-validation-patternsDesign and implement input validation patterns (whitelisting, boundary checks, type validation) to prevent injection and buffer overflow attacks.
output-encodingImplement context-specific output encoding to prevent XSS and injection attacks. Encode HTML, URL, JavaScript, and other contexts appropriately.
owasp-top-ten-checkAudit application architecture and code against OWASP Top 10 vulnerabilities. Use when assessing application security posture and prioritizing fixes.
secrets-managementManage API keys, credentials, and secrets securely using vaults, environment variables, and rotation policies. Prevent secrets from being committed to code or exposed in logs.
secure-coding-reviewReview code systematically for security vulnerabilities using OWASP Top 10, secure coding patterns, and static analysis best practices. Use when reviewing pull requests, conducting security code reviews, or implementing secure development practices.
session-managementImplement secure session handling with proper token generation, storage, expiry, CSRF protection, and session invalidation.
Slash commands (3)
/security-secure-development:audit-authAudit authentication and authorization implementation for compliance with secure design principles.
/security-secure-development:check-owaspCheck application against OWASP Top 10 and identify gaps in critical security controls.
/security-secure-development:review-securityConduct a comprehensive security code review examining OWASP Top 10, secure coding patterns, input validation, and cryptography.
More from sethdford/claude-skills
All 57 plugins →architect-system-design
claudeArchitecture patterns, system decomposition, DDD, microservices, event-driven, CQRS. Grounded in TOGAF, IASA BTABoK, ISO 42010.
10 skills · 4 commands
48
designer-research
claudeUser research: personas, empathy maps, journey maps, interviews, usability testing, JTBD.
10 skills · 4 commands
48
engineer-code-quality
claudeClean code, refactoring, SOLID principles, code smell detection, complexity analysis.
10 skills · 4 commands
48
pm-discovery
claudeProblem discovery, customer research, opportunity assessment, assumption mapping.
10 skills · 4 commands
48
designer-ui-design
claudeUI design: color systems, typography, layout grids, responsive design, data viz.
9 skills · 4 commands
48
Similar plugins
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-federation
claudeCross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
sickn33/agentic-awesome-skills 49,620
duende-skills
claudecodexDuende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
anthropics/claude-plugins-official 47,076
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain security-secure-development?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins57 plugins