10 plugins issus de marketplaces Claude Code publiques. Chacun regroupe des skills, des commandes slash, des agents, des hooks ou des MCP servers qui s'installent ensemble.
10 plugins correspondent à ces filtres.
evilmartiansevilmartians/agent-skills1
mindxoMyr-Aya/GouvernAI-claude-code-plugin1Soumettez le dépôt avec .claude-plugin/marketplace.json et nous listerons chaque plugin.
Soumettre une marketplaceSecurity find-and-fix loop — adapted (Apache-2.0) from anthropics/defending-code-reference-harness and generalised to all vulnerability classes. Four read/write-only skills (no target-code execution): threat-model (bootstrap from code+CVEs+git-history, or interview an owner via Shostack's four questions, or both -> THREAT_MODEL.md), vuln-scan (static source review, parallel per-focus-area subagents -> VULN-FINDINGS.json), triage (adversarial N-vote verification, 16 false-positive exclusion rules, root-cause dedup, impact-on-asset x exploitability severity with stated deployment conditions, owner routing, checkpoint/resume -> TRIAGE.json), and patch (root-cause candidate diffs + independent reviewer, fix-first priority for deployment-conditional dangerous primitives, never auto-applied -> PATCHES/). The autonomous C/C++ + AddressSanitizer execution pipeline this was extracted from is referenced, not bundled (vuln-scan/HARNESS.md).
securityProduce threat models for open-source projects: the security contract between a project and its users, structured for downstream integrators and vulnerability triagers.
securityAssess security and compliance posture, query audit logs, and manage CloudTrail for Volcengine accounts and resources.
securityApply the SAIL V2 (Secure AI Lifecycle) framework to secure AI applications and agents — gap analyses, security roadmaps, maturity assessments, compliance checklists (ISO/IEC 42001, EU AI Act, OWASP, DASF, AIUC-1), control prioritization, and vendor RFPs. Grounded in the full 91-risk SAIL catalog.
securitySet up a secure npm package release process — Trusted Publishing with staged publishes from GitHub Actions — and walk the user through the required npmjs.com and GitHub settings
securityAchieve flow state safely with Claude Code. Auto-approves ~60% of actions, gates risky operations, hard-blocks dangerous patterns. Dual enforcement: skill layer + deterministic hooks. Token cap for cost governance. 120+ unit tests.
securityJailbreak regression benchmark for LLM endpoints with repeatable known-pattern attacks and deterministic scoring
securityGoCortexIO skill bundles for the Palo Alto Networks Cortex Platform.
securityPre-launch security audit for web apps. Runs OWASP checks via shell scripts, then AI analyzes findings.
security🪼 Your security copilot as you build, your Blue Team when you audit, whether you're a developer or not.
security
