claude

static-analysis

Semgrep/CodeQL-driven static analysis (needs semgrep installed) (upstream: trailofbits/skills, CC-BY-SA-4.0; pinned, not copied)

5 on GitHubby Axel Mierczuk & Paweł Płatekv1.5.1CC-BY-SA-4.0updated yesterdaysecurity
/

Plugin static-analysis from marketplace memnos in thameema/memnos. Commands read from the repo's manifest — yesterday.

What it installs

Skills (3)

  • codeql

    Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/

  • sarif-parsing

    Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SA

  • semgrep

    Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the output to SARIF. Supports two scan mode

View source on GitHub memnos.net

More from thameema/memnos

All 22 plugins →

agent-skills

claudecodex

Production-grade engineering skills, sub-agents and commands (upstream: addyosmani/agent-skills, MIT; pinned, not copied)

25 skills · 4 agents

5

penetration-tester

claude

25-skill pentest pack: ROE/authorization + scope gate first, then header/TLS/CORS/secret/dependency/code scans, OWASP Top 10 mapping and exec-readable reporting (upstream: jeremylongshore/claude-code-plugins-plus-skills, MIT; pinned, not copied)

26 skills · 2 commands

5

c4-architecture

claude

C4-model architecture documentation agents (context/container/component/code) (upstream: wshobson/agents, MIT; pinned, not copied)

1 command · 4 agents

5

comprehensive-review

claude

Multi-perspective code, architecture and security review agents (upstream: wshobson/agents, MIT; pinned, not copied)

2 commands · 3 agents

5

differential-review

claude

Security-focused review of diffs and PRs (upstream: trailofbits/skills, CC-BY-SA-4.0; pinned, not copied)

1 skill · 1 command · 1 agent

5

memnos

claude

Auto recall + save, MCP tools and /memnos for your self-hosted memnos server (embedded Postgres by default).

1 command · 1 MCP server · hooks

5

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

AAS Security Engineer

codex

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain static-analysis?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins22 plugins