security-audit plugins

by Paweł Huryn

AI Shipping Kit — for PMs and founders accountable for AI-built code. Document a vibe-coded app, review it for correctness, security and performance defects, and produce a reviewer-ready shipping packet.

by NYCU-Chung

An engineering team in a box for Claude Code. 12 specialized subagents (planner, fullstack-engineer, refactor-specialist, migration-engineer, frontend-designer, critic, vuln-verifier, debugger, db-expert, onboarder, tool-expert, web-researcher) plus 15 automation hooks (pre-commit secret scan, MCP health tracking, cost tracking, test runner, branch protection, large file warner, session summary, batch format, design quality, config protection, and more) wired by the P7/P9/P10 methodology with three red lines: closure discipline, fact-driven, exhaustiveness.

by Matt Corbett

Blockchain & Web3 Engineering specialist team — agents (web3-architect-lead, smart-contract-security-analyst, gas-optimization-specialist, protocol-economics-specialist), skills, templates, commands, an advisory hook, best-practice rules, and a research-grounded knowledge bank. A Web3 team for an engineer or protocol architect accountable for a contract system that holds value — it treats deploy as irreversible and audit as the gate, holds reentrancy/access-control/arithmetic as the top vuln classes, reads gas as UX and cost, and tests invariants not just the happy path. Inherits ravenclaude-core protocols.

by vikash ruhil

Loomwright is a plan-first, multi-agent development system for Claude Code. Launch Pad turns a goal into a reviewed brief; Supervisor executes it autonomously across parallel git worktrees with self-heal; dedicated agents cover code review, red-teaming, QA, and standalone PR review-and-heal. 14 agent roles, 24 slash commands, 42 skills, 39 quality gate hooks. Full history in CHANGELOG.md.

by Diverta inc.

Kuroco Headless CMS integration patterns, best practices, and development guidelines / Kuroco HeadlessCMSの統合パターン、ベストプラクティス、開発ガイドライン

by Mamdouh Aboammar

Deeply inspect any repository from the ground up, determine its true current state, audit across 14 engineering and product domains, and construct a mature, prioritized, dependency-aware repository backlog of execution-ready tracker Issues without modifying application code.

by Mamdouh Aboammar

Deeply inspect any repository from the ground up, determine its true current state, audit across 14 engineering and product domains, and construct a mature, prioritized, dependency-aware repository backlog of execution-ready tracker Issues without modifying application code.