41 plugin dari marketplace Claude Code publik. Masing-masing membundel skill, slash command, agent, hook, atau MCP server yang di-install bersama.
Menampilkan 41 plugin yang sesuai dengan filter ini.
claude-code-plugins-plusjeremylongshore/tons-of-skills-marketplace2
dotnet-agent-skillsdotnet/skills1
skillmdskillmds/SkillMD1
claude-code-skillsalirezarezvani/claude-skills1Kirim repo dengan .claude-plugin/marketplace.json dan kami akan mencantumkan setiap plugin.
Kirim marketplaceSkills for .NET MAUI development: environment setup, diagnostics, troubleshooting, navigation, data binding, dependency injection, layout, and theming.
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
PreToolUse security reminder hook for Claude Code. Catches 12 common security anti-patterns in Edit/Write/MultiEdit operations BEFORE they happen — command injection (exec, os.system, subprocess shell=True), XSS (innerHTML, dangerouslySetInnerHTML, document.write), SQL injection (f-string queries, .format), unsafe deserialization (pickle, yaml.unsafe_load), code injection (eval, new Function), and GitHub Actions workflow injection. Session-state caching prevents duplicate warnings; 30-day auto-cleanup. Disable per-session with ENABLE_SECURITY_REMINDER=0. Ported from David Dworken at Anthropic.
Agent safety seatbelts: the pre-flight security checklists you run before an agent touches email, the browser, files, or goes autonomous — least-privilege reviews, prompt-injection spotting, and the blast-radius drill
GABBE security skills (21): security, privacy and AI safety: access control, secrets, cryptography, prompt-injection defence, red teaming, compliance and legal review.
Drop-in ADR toolkit for AI coding agents: bootstrap and audit with /adr-kit:init, guided authoring with /adr-kit:adr, pre-commit and CI enforcement with file:line citations, context injection over a generated graph index, Guardian staleness detection, lifecycle commands, strict lint, adr-doctor, and a key-free MCP server.
DevExpress WPF skills: Data Grid, Tree List, Pivot Grid, Scheduler, Charts, Tab Control, Ribbon and Bars, MVVM Framework, Property Grid, Data Editors, Layout Management, Loading Indicators, Accordion, AI Chat Control, Grid Data Source Advisor, Dependency Injection (adding Microsoft.Extensions.DependencyInjection to an existing app), Theme Customization (appearance, templates, and theme-resource overrides), and Screen from Screenshot (building a DevExpress WPF screen from a screenshot, mockup, or Figma frame).
Complete toolkit: all 52 skills covering development, documentation, git, github, jira, code review, testing, refactoring, CI/CD, image generation, framework documentation injection, product specs, multi-agent orchestration, open-source launch prep, skill creation and improvement, and more
Development skills: feature implementation, bug fixing, testing, refactoring, CI/CD generation, framework documentation injection, project planning, image generation (Codex imagegen), database migrations, Docker setup, environment setup, visual regression checks, i18n checks, release shipping, and open-source launch prep
Chaos testing for resilience with failure injection, latency simulation, and system resilience validation
Automated security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues
Build Windows and cross-platform .NET client applications with the MVVM Toolkit, dependency injection, messaging, Windows metadata APIs, WinUI 3 migration, Microsoft Store publishing, System.CommandLine, NuGet, and timezone handling.
Audit an AI agent skill before installing it. Use proactively whenever the user is about to add, install, enable, or evaluate an unfamiliar skill — including phrases like "audit this skill", "is this skill safe", "scan skill before install", "check skill for malicious code", "review this plugin", or any pre-install gate on an untrusted, third-party, or community-distributed skill bundle. Runs ten categories of static checks (code execution, network exfiltration, credential harvesting, persistence, prompt injection, supply-chain hooks, obfuscation, destructive filesystem ops, secrets, Trojan Source / homoglyphs) and emits a PASS / WARN / FAIL verdict.
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers. 29 scanners detect prompt injection, MCP tool poisoning, credential exposure, malicious lifecycle hooks, package IOCs, CVEs, CISA KEV exposure, and post-incident traces. Zero dependencies. Zero telemetry.
White-box bug hunting, AI-agent and LLM red-teaming, cloud identity and CI/CD trust, client-app trust surfaces across browser and editor extensions and Electron, wire-protocol and token trust across gRPC, WebSocket, and JWT, enterprise identity lifecycle across SCIM and JIT provisioning, directory sync, MFA and key lifecycle, and Kerberos delegation, infrastructure-as-code and container hardening, mobile app security, smart-contract and DeFi review across EVM and Move, skill and MCP supply-chain vetting, API and object-authorization depth, host privilege escalation, network-service and transport trust, firmware and embedded-software trust, web trust boundaries, authentication and session depth, rate-limiting and multi-tenant isolation, injection and resource-exhaustion depth, file-upload and content handling, defensive detection and logging, supply-chain and dependency risk, business-logic and access-control depth, the classic web-attack classes across XSS, template and command injecti
securityOWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
10 working methods for jvm dotnet: csharp-linq, dotnet-async, dotnet-dependency-injection, dotnet-minimal-apis, and more
Chaos engineering and resilience drills: chaos experiment design, Chaos Mesh and Toxiproxy fault injection, disaster recovery drills, error-budget gates. Covers steady-state hypotheses with LitmusChaos and Gremlin routing, a drill run protocol with pre-flight and abort gates, combined HTTP and TCP fault injection, backup restore and RTO measurement, and burn-rate alerting with MTTR / MTBF / MTTD / MTTA incident metrics.
operations-resilienceDetects prompt injection hidden in documents from the other side (pleadings, skeletons, bundles, served evidence, opponents' emails and attachments) before an AI reads them, so the model is not turned against your client. Checks word by word that the text an extractor hands the model was visibly drawn on the page: white, near-white, covered, clipped, off-page, tiny, transparent and invisible-mode text in PDF (ink test plus OCR); Word formatting resolved as Word does (styles, shading, theme colours, scaling, off-page frames, fallbacks, unused headers); HTML/CSS, RTF, email with attachments and zips, xlsx/pptx and legacy formats. Flags Unicode smuggling, text addressed to an AI and authorities found only in hidden text. Fails closed. Optional Read-tool hook. Use BEFORE any AI summary or analysis of an opposing or third-party document. Triggers: 'scan for injection', 'is this document safe', 'check the other side's skeleton', 'injection guard'.
Audits legal AI skills, prompts, workflows, MCP/tool instructions, and agent packages before they are trusted or installed. It detects prompt injection, hidden or hostile instructions, unsafe scripts, suspicious frontmatter, credential exposure, exfiltration paths, persistence mechanisms, cron/launchd hooks, unauthorized network calls, and supply-chain risk. Use it before adopting third-party or generated skills; before publishing a skill to a legal AI marketplace; when reviewing SKILL.md files, skill folders, scripts, references, MCP manifests, or automation instructions; or when a user asks whether an AI workflow is safe. Paste or upload the skill, prompt, MCP/tool instruction, etc you want to review. The auditor treats the material as untrusted data: it does not execute scripts, install packages, or obey commands embedded inside the reviewed content. It returns a verdict — approve, approve with constraints, rewrite, quarantine, or reject — plus the key risks and recommended remediat
