Claude Code 플러그인
공개 Claude Code 마켓플레이스의 플러그인 13개입니다. 각 플러그인은 함께 설치되는 스킬, 슬래시 명령, 에이전트, 훅 또는 MCP 서버를 묶습니다.
필터와 일치하는 13개의 플러그인을 표시합니다.
공개 Claude Code 마켓플레이스의 플러그인 13개입니다. 각 플러그인은 함께 설치되는 스킬, 슬래시 명령, 에이전트, 훅 또는 MCP 서버를 묶습니다.
필터와 일치하는 13개의 플러그인을 표시합니다.
.claude-plugin/marketplace.json이 포함된 repo를 제출하면 모든 plugin을 목록에 추가합니다.
marketplace 제출API security hardening, authentication implementation, authorization patterns, rate limiting, and input validation
Healthcare documentation skills for clinicians and health teams (drafting aids for clinician review, not medical advice): SOAP Note, Discharge Summary, Prior Authorization Letter, and Clinical Trial Protocol.
Drive a real, user-installed Chromium-derived browser from an AIWG agent. Wraps @playwright/mcp with a setup wizard, health-check doctor, allow-list enforcement, and an opinionated agent persona that respects authorization and audit boundaries.
API/interface design and OpenAPI, backend review with integration boundaries, auth/session and authorization, error handling and observability, and Python/FastAPI project review.
Human-in-the-loop (HITL) gate definitions for agent operations. Provides reusable YAML gates for destructive-action authorization, false-positive override, and recovery escalation. Loaded by agent loops and orchestrators that need bounded human checkpoints.
Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document types: SSP, SAP, SAR, POA&M, CIS/CRM workbooks. Also trigger for questions about FedRAMP Certification Classes (A, B, C, D — new baseline labels: A = pilot/transitional, B = LI-SaaS/Low, C = Moderate, D = High, per NTC-0004), FedRAMP 20x (now the primary authorization pathway), OSCAL mandate (September 2026), 3PAO assessments, continuous monitoring (ConMon), gap assessments, system boundary definition, or architecture reviews for federal cloud. FedRAMP Ready retires July 28, 2026. When in doubt, use this skill — it covers the full FedRAMP lifecycle from readiness through continuous monitoring.
Audit Terms of Service, user agreements, and privacy policies for consumer risks, producing a structured report that flags unfair clauses, data traps, and liability issues. Trigger when a user asks to review, audit, or analyze a ToS, privacy policy, or user agreement, or mentions specific concerns like auto-renewal or data authorization.
Backend code review — injection and SSRF, boundary validation, object-level authorization, mass assignment and data exposure, error leakage, N+1 and unbounded queries. Use when a diff touches API routes or handlers, database access, auth middleware, or server code that reads files, starts processes or fetches URLs.
Use when designing or implementing software securely: define security requirements, threat-model a feature, choose secure defaults, design authentication and authorization, handle untrusted data and secrets, evaluate dependencies, design multi-tenant trust boundaries, or review security-sensitive changes. Use for prevention during requirements, design, implementation, and review; not for post-build security assessments or scanning an existing codebase.
Design, integrate, evaluate, self-host, and troubleshoot typed System One decision models including TypeSafe Jev, Convai Innovations Laya, CLM, and experimental Strands Decider. Use for Choice/Score/Noul judgments and experimental Jev image/Box queries inside deterministic software, app-control loops, routing, ranking, guardrails, calibration, semantic code linting and post-edit feedback, DevOps decision support, confidence-based escalation, or private open-model inference. Do not use for syntactic/style linting, exact policy or authorization, open-ended generation, or generic LLM serving without a bounded decision contract.
Application security, authorization, dependency risk, and privacy reviews using code evidence, reachability analysis, and actionable findings.
Use this skill for any task involving Thai government letters, official correspondence, formal petitions, authorization letters, leave requests, or ราชการ forms.
languageThreat modeling, authentication/authorization, secrets management, security hardening, and cloud/k8s audit