claude

tommy-pentest

Opt-in penetration-testing pack: ROE/authorization gate runs first, then header/TLS/CORS/dependency/code scans, OWASP-mapped reporting, and two Tommy-authored skills for the gaps passive scans can't see: internal live-Kubernetes-cluster testing, and dynamic active-exploitation testing via the self-hosted Strix CLI (working PoCs, not just flagged patterns). Not included in tommy-all.

5 on GitHubby Thameem Ansariv0.1.17Apache-2.0updated yesterdaysecurity
/

Plugin tommy-pentest from marketplace memnos in thameema/memnos. Commands read from the repo's manifest — yesterday.

What it installs

Skills (2)

  • performing-live-cluster-penetration-testing

    Run a structured, authorized internal penetration test from INSIDE a live Kubernetes cluster (Azure AKS focus). Covers pod recon, Azure workload-identity and Key Vault credential escalation, internal-only endpoint testing, IMDS reachability, RBAC and privilege-escalation checks, network-policy gaps,

  • running-dynamic-exploitation-with-strix

    Run a dynamic, active-exploitation pentest with the self-hosted Strix CLI (usestrix/strix, Apache-2.0) — autonomous AI agents that don't just flag vulnerabilities but attempt real exploits (XSS, SSRF, IDOR, auth/access-control flaws, JWT attacks, business logic, race conditions) and only report find

View source on GitHub memnos.net

More from thameema/memnos

All 22 plugins →

agent-skills

claudecodex

Production-grade engineering skills, sub-agents and commands (upstream: addyosmani/agent-skills, MIT; pinned, not copied)

25 skills · 4 agents

5

penetration-tester

claude

25-skill pentest pack: ROE/authorization + scope gate first, then header/TLS/CORS/secret/dependency/code scans, OWASP Top 10 mapping and exec-readable reporting (upstream: jeremylongshore/claude-code-plugins-plus-skills, MIT; pinned, not copied)

26 skills · 2 commands

5

c4-architecture

claude

C4-model architecture documentation agents (context/container/component/code) (upstream: wshobson/agents, MIT; pinned, not copied)

1 command · 4 agents

5

comprehensive-review

claude

Multi-perspective code, architecture and security review agents (upstream: wshobson/agents, MIT; pinned, not copied)

2 commands · 3 agents

5

differential-review

claude

Security-focused review of diffs and PRs (upstream: trailofbits/skills, CC-BY-SA-4.0; pinned, not copied)

1 skill · 1 command · 1 agent

5

memnos

claude

Auto recall + save, MCP tools and /memnos for your self-hosted memnos server (embedded Postgres by default).

1 command · 1 MCP server · hooks

5

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

hyperframes

claudecodex

Recommended: all published HyperFrames skills in one versioned bundle. Create and render videos from HTML: the contract, film, captions, overlays, motion and look references, the CLI, the registry, media, Figma, slideshows and Remotion ports.

22 skills

heygen-com/hyperframes 83,516

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain tommy-pentest?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins22 plugins