37 Plugins aus öffentlichen Claude Code marketplaces. Jedes bündelt Skills, Slash-Commands, Agents, Hooks oder MCP servers, die zusammen installiert werden.
Zeige 37 Plugins, die diesen Filtern entsprechen.
claude-code-plugins-plusjeremylongshore/tons-of-skills-marketplace2
testland-qatestland/qa2
dotnet-agent-skillsdotnet/skills1
claude-code-skillsalirezarezvani/claude-skills1Reiche das repo mit .claude-plugin/marketplace.json ein und wir listen jedes plugin auf.
Marketplace einreichenSkills for .NET MAUI development: environment setup, diagnostics, troubleshooting, navigation, data binding, dependency injection, layout, and theming.
PreToolUse security reminder hook for Claude Code. Catches 12 common security anti-patterns in Edit/Write/MultiEdit operations BEFORE they happen — command injection (exec, os.system, subprocess shell=True), XSS (innerHTML, dangerouslySetInnerHTML, document.write), SQL injection (f-string queries, .format), unsafe deserialization (pickle, yaml.unsafe_load), code injection (eval, new Function), and GitHub Actions workflow injection. Session-state caching prevents duplicate warnings; 30-day auto-cleanup. Disable per-session with ENABLE_SECURITY_REMINDER=0. Ported from David Dworken at Anthropic.
Agent safety seatbelts: the pre-flight security checklists you run before an agent touches email, the browser, files, or goes autonomous — least-privilege reviews, prompt-injection spotting, and the blast-radius drill
GABBE security skills (21): security, privacy and AI safety: access control, secrets, cryptography, prompt-injection defence, red teaming, compliance and legal review.
Drop-in ADR toolkit for AI coding agents: bootstrap and audit with /adr-kit:init, guided authoring with /adr-kit:adr, pre-commit and CI enforcement with file:line citations, context injection over a generated graph index, Guardian staleness detection, lifecycle commands, strict lint, adr-doctor, and a key-free MCP server.
DevExpress WPF skills: Data Grid, Tree List, Pivot Grid, Scheduler, Charts, Tab Control, Ribbon and Bars, MVVM Framework, Property Grid, Data Editors, Layout Management, Loading Indicators, Accordion, AI Chat Control, Grid Data Source Advisor, Dependency Injection (adding Microsoft.Extensions.DependencyInjection to an existing app), Theme Customization (appearance, templates, and theme-resource overrides), and Screen from Screenshot (building a DevExpress WPF screen from a screenshot, mockup, or Figma frame).
Complete toolkit: all 52 skills covering development, documentation, git, github, jira, code review, testing, refactoring, CI/CD, image generation, framework documentation injection, product specs, multi-agent orchestration, open-source launch prep, skill creation and improvement, and more
Development skills: feature implementation, bug fixing, testing, refactoring, CI/CD generation, framework documentation injection, project planning, image generation (Codex imagegen), database migrations, Docker setup, environment setup, visual regression checks, i18n checks, release shipping, and open-source launch prep
Chaos testing for resilience with failure injection, latency simulation, and system resilience validation
Automated security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues
Audit an AI agent skill before installing it. Use proactively whenever the user is about to add, install, enable, or evaluate an unfamiliar skill — including phrases like "audit this skill", "is this skill safe", "scan skill before install", "check skill for malicious code", "review this plugin", or any pre-install gate on an untrusted, third-party, or community-distributed skill bundle. Runs ten categories of static checks (code execution, network exfiltration, credential harvesting, persistence, prompt injection, supply-chain hooks, obfuscation, destructive filesystem ops, secrets, Trojan Source / homoglyphs) and emits a PASS / WARN / FAIL verdict.
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers. 29 scanners detect prompt injection, MCP tool poisoning, credential exposure, malicious lifecycle hooks, package IOCs, CVEs, CISA KEV exposure, and post-incident traces. Zero dependencies. Zero telemetry.
OWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
10 working methods for jvm dotnet: csharp-linq, dotnet-async, dotnet-dependency-injection, dotnet-minimal-apis, and more
Chaos engineering and resilience drills: chaos experiment design, Chaos Mesh and Toxiproxy fault injection, disaster recovery drills, error-budget gates. Covers steady-state hypotheses with LitmusChaos and Gremlin routing, a drill run protocol with pre-flight and abort gates, combined HTTP and TCP fault injection, backup restore and RTO measurement, and burn-rate alerting with MTTR / MTBF / MTTD / MTTA incident metrics.
operations-resilienceDetects prompt injection hidden in documents from the other side (pleadings, skeletons, bundles, served evidence, opponents' emails and attachments) before an AI reads them, so the model is not turned against your client. Checks word by word that the text an extractor hands the model was visibly drawn on the page: white, near-white, covered, clipped, off-page, tiny, transparent and invisible-mode text in PDF (ink test plus OCR); Word formatting resolved as Word does (styles, shading, theme colours, scaling, off-page frames, fallbacks, unused headers); HTML/CSS, RTF, email with attachments and zips, xlsx/pptx and legacy formats. Flags Unicode smuggling, text addressed to an AI and authorities found only in hidden text. Fails closed. Optional Read-tool hook. Use BEFORE any AI summary or analysis of an opposing or third-party document. Triggers: 'scan for injection', 'is this document safe', 'check the other side's skeleton', 'injection guard'.
Audits legal AI skills, prompts, workflows, MCP/tool instructions, and agent packages before they are trusted or installed. It detects prompt injection, hidden or hostile instructions, unsafe scripts, suspicious frontmatter, credential exposure, exfiltration paths, persistence mechanisms, cron/launchd hooks, unauthorized network calls, and supply-chain risk. Use it before adopting third-party or generated skills; before publishing a skill to a legal AI marketplace; when reviewing SKILL.md files, skill folders, scripts, references, MCP manifests, or automation instructions; or when a user asks whether an AI workflow is safe. Paste or upload the skill, prompt, MCP/tool instruction, etc you want to review. The auditor treats the material as untrusted data: it does not execute scripts, install packages, or obey commands embedded inside the reviewed content. It returns a verdict — approve, approve with constraints, rewrite, quarantine, or reject — plus the key risks and recommended remediat
6 skill hygiene tools: health report, auto-fix + prune, value (honest token split + usage), security scan (prompt injection + malicious patterns), discover (search + precheck), swipe (interactive triage).
tmux for coding agents - detached sessions, send-keys input injection, capture-pane polling with a race-free sentinel, formats, completion detection, control mode, and a pitfall checklist
Concurrency testing: deterministic race-condition tests, deadlock detection, async ordering checks, and database MVCC isolation-level tests. Includes ThreadSanitizer and the Go race detector with goleak, plus a critic agent (concurrency-critic) that flags unguarded shared state and lock-ordering risks. Code-level races, distinct from qa-resilience (infrastructure fault injection).
backend-distributed
