Find plugins

by Rick Hightower

News digest ContentPack: news items, sources, scheduled digests, signal strength, trends, and follow-up candidates for long-form.

by Rick Hightower

Go-to-market ContentPack: offers, positioning, messaging pillars, ICPs, campaigns, battle cards, and proof points.

by Rick Hightower

Content and audience ContentPack: articles, drafts, series, editorial calendar, subscribers, segments, and performance metrics.

by sundayhao

Agentic workflow with memory and tribal knowledge. Transforms Claude from goldfish to elephant with persistent knowledge across sessions.

by Mike Rihm

Shared project knowledge in Markdown and Git: three short startup reads, a reference manual, four focused procedures, topic records, pending-save recovery and verified publication.

by Diankes

Policy and hooks that make the mcp-sqlite-memory server a second brain for long-running work: raw capture by hooks, curated entries by template, LaTeX-only math, a controlled tag vocabulary, and topic resume across months.

by Dmitry Fomin

Check a risky hypothesis against an independent LLM — DeepSeek, Gemini, GPT, Grok, or any model on OpenRouter — through one OpenAI-compatible script.

by Bohica Labs

ICS/OT Security Operations — CVE enrichment, event investigation, MITRE ATT&CK mapping, and adversarial quality review with convergence-driven analysis.

by Dan Wright

Blocks commands that print secrets, scrubs secrets from tool output, and refuses tool input that carries one, a call another mod answers itself included.

by awesome-claude-mods

Keeps secrets out of Claude's context: API keys, tokens, private keys and passwords in tool output are replaced with [REDACTED:kind] before the model or the transcript ever sees them.

by Webgrip

Places a secret at the right level of the Webgrip estate and names the manifest that puts it there: floor (SOPS), vault (OpenBao), cluster (External Secrets), bridge (Forgejo Actions and Cloudflare Worker secrets), short-lived (OIDC, dynamic credentials, per-run tokens), person (a laptop). The placement half of the secrets model; guard-secrets is the enforcement half.

Audit a repository for security weaknesses and supply-chain risks.

by Matheus Malagris

High-confidence security review of a diff, layered on wstg-security-testing. Confidence gate, false-positive precedents, WSTG-ID mapping, and a dependency audit. Reports only concretely exploitable findings.

Skill pack for security auditing tasks

Continuously audits dependencies, configurations, and code for security vulnerabilities

by Muhammad Basit Ali

Seven lightweight security skills for everyday development: secrets hygiene scan, npm audit and pip-audit reader, HTTP security header check, JWT inspector, CORS review, auth flow review and a security review of a diff. Agent and MCP security lives in the agent-security-skills marketplace.

by Hidari

Product-agnostic Vulnerability Assessment / Red Team / Blue Team security testing automation for Claude Code. Monthly SAST + passive testing lives in /security-vulnerability-assessment (Layer 1+2); /security-redteam runs active attack simulation (Layer 3+4 by default) and can chain into Blue Team with --purple. Layer 3 seeds are recorded in a cleanup-queue and purged by /security-cleanup, which re-derives every delete command from the profile template instead of executing the queue's own string. Request budgets, egress rules and the production gate are enforced by the agents; their Safety constraints are the canonical statement.

by Seth Hobson

SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, and regulatory documentation

by nagisanzenin

Application security — STRIDE threat modeling, OWASP audit, pen test planning, compliance validation

by wmxscott

Checks a hardware security key is plugged in before git signs a commit or tag with GPG, and asks for it if not

by OpenAI

Scans authorized code to detect and confirm plausible vulnerability findings. Supports codebase investigation, change set analysis, and minimal fix preparation.

by Seth Hobson

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

by Vouchington

Repository-neutral Codex Security finding triage.

by gaoguobin

Standalone idea-shaping skill that turns rough concepts into reviewed specs and stops before implementation.