13509 plugins available.
Audit a repository for security weaknesses and supply-chain risks.
by Matheus Malagris
High-confidence security review of a diff, layered on wstg-security-testing. Confidence gate, false-positive precedents, WSTG-ID mapping, and a dependency audit. Reports only concretely exploitable findings.
Skill pack for security auditing tasks
Continuously audits dependencies, configurations, and code for security vulnerabilities
by Hidari
Product-agnostic Vulnerability Assessment / Red Team / Blue Team security testing automation for Claude Code. Monthly SAST + passive testing lives in /security-vulnerability-assessment (Layer 1+2); /security-redteam runs active attack simulation (Layer 3+4 by default) and can chain into Blue Team with --purple. Layer 3 seeds are recorded in a cleanup-queue and purged by /security-cleanup, which re-derives every delete command from the profile template instead of executing the queue's own string. Request budgets, egress rules and the production gate are enforced by the agents; their Safety constraints are the canonical statement.
by wmxscott
Checks a hardware security key is plugged in before git signs a commit or tag with GPG, and asks for it if not
by OpenAI
Scans authorized code to detect and confirm plausible vulnerability findings. Supports codebase investigation, change set analysis, and minimal fix preparation.
by Vouchington
Repository-neutral Codex Security finding triage.
seeded-plugin is an open-source Claude Code plugin indexed from GitHub with 1 MCP server. Review its manifest and source before installing.
by Vlad Belciug
Find repeated expensive read-only validation in a codebase and measure whether safer reuse is worthwhile before enabling it.
by Ghast AI
Use Sei’s official MCP to inspect blocks, balances, tokens, NFTs and contracts, with a separate optional wallet connection for authorized transactions.
by VeigaPunk
Sekhmet — always-available Codex Titanium swarm substrate (xbreed L3, max 64 runners).
by Mariusz Rakus
Background reflection on Claude Code sessions that promotes recurring lessons into skills, hooks, rules and agents, tracks artifact usage feedback, and ships a local web UI to review and rate them. Runs on Bun, no Python required.
by jointsome0-lgtm
Portable engineering workflow skills for software design, SDD decisions, ticket slicing, prompting, and PR review loops.
by Daniel Paul
The AI Founder Circle conversation engine. Drafts your daily chat starts, coaches live conversations, runs your day 1-3-7 follow-up sweep, and writes hand-raising posts, all in your Voice DNA.
by ekunish
Literature search and citation exploration using the Semantic Scholar API.
Analyze code and investigate security findings with the MCP server built into the official Semgrep CLI.
by Semrush Holdings, Inc.
Retrieve read-only Semrush SEO, keyword, backlink, traffic, audience, market, paid search, shopping, site audit, position tracking, and project data through Semrush's official MCP server.
Decide the correct Semantic Version bump for a change (major/minor/patch) by analyzing the diff against the project's public surface and running the ecosystem's breaking-change detector, then apply it (bump the manifest + changelog).
by Senpi
Turn your AI assistant into your AI quant engineer for Hyperliquid. Ask your own Senpi agent what's moving, run a signals sweep, read smart-money positioning, research traders, score any wallet with the Quant Desk, and work through a strategy — with every trade or fund movement held for your approval.
by Eran Roseman
Skills shared by software-dev and research-vault: rethink-audit and adhd.
by Mao
機密ファイル (.env, *.secret, 秘密鍵, クレデンシャル) を Vibe Coding から守る多段 hook。Read/Bash/Edit/Write で機密パスを保護し、Stop で .gitignore 未登録を検出。うっかり露出の予防が目的で、敵対的バイパス対策ではない
Close the loop after ship — scan a repo (and optionally its live prod signal) for post-release trouble, then file what it finds as docs/intent/NNNN-<slug>.md so it re-enters the dev-flow chain as ordinary work.