Claude Code plugins
251 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 251 plugins that match these filters.
251 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 251 plugins that match these filters.
Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplaceBuild CI/CD pipelines for GitHub Actions, GitLab CI, Jenkins, and more
AI-powered conventional commit message generator with smart analysis
Enhances web_search Skill by automatically creating GitHub issues from research findings. Research topics, extract key insights, and generate formatted tickets in seconds.
agents-scaffold 의 옵트인 yd-* 스킬 — 메인테이너 환경 전용(git-sync·git-ship·claude-auth-sync·finguard·doksam-ui·script-editor·sdlc-orchestrator·session-recording·agents-mem·naver-blog). 한국어 전용.
Kelly's App-in-Skill business tools: email inbox-zero, money ledger, finance anomaly audit, personal CRM, unified chat inbox, inquiry-to-quote desk, ticket triage & dispatch, lesson-plan compliance, social media aggregation, Search Console SEO desk, user feedback roadmap, market intelligence radar, fleet ops monitoring, content repurposing, GitHub PR review, short-drama & music-video production, team standup board, cross-border e-commerce (product research, listing factory, ads desk), and multi-agent rule setup. Each bundles a local browser UI for human review and approval.
Security find-and-fix loop — adapted (Apache-2.0) from anthropics/defending-code-reference-harness and generalised to all vulnerability classes. Four read/write-only skills (no target-code execution): threat-model (bootstrap from code+CVEs+git-history, or interview an owner via Shostack's four questions, or both -> THREAT_MODEL.md), vuln-scan (static source review, parallel per-focus-area subagents -> VULN-FINDINGS.json), triage (adversarial N-vote verification, 16 false-positive exclusion rules, root-cause dedup, impact-on-asset x exploitability severity with stated deployment conditions, owner routing, checkpoint/resume -> TRIAGE.json), and patch (root-cause candidate diffs + independent reviewer, fix-first priority for deployment-conditional dangerous primitives, never auto-applied -> PATCHES/). The autonomous C/C++ + AddressSanitizer execution pipeline this was extracted from is referenced, not bundled (vuln-scan/HARNESS.md).
security中文互联网研究技能:搜索微博、小红书、B站、知乎、抖音、微信公众号、百度、今日头条近 30 天的真实讨论,按互动与时效排序并跨平台聚类,生成有据可查的报告;--hot 一键查看全网热榜;可选 Hacker News / GitHub / Reddit 海外源。
Skills for AI coding agents: code review, test writing, design docs, debugging, security and dependency audits, git history surgery, refactoring, copywriting, and cleaning up AI-written code and text.
Infrastructure and DevOps specialists for AWS, GCP, Kubernetes, Docker, Terraform, GitHub Actions, GitLab CI, and security auditing.
AI-powered commit message generator - analyzes your git diff and creates conventional commit messages instantly
Complete DevOps automation suite with 25 plugins covering Git workflows, CI/CD pipelines, Docker optimization, Kubernetes management, Terraform IaC, and deployment strategies
Author and operate GitHub Copilot customization itself: skills, agents, instructions, prompts, memory, harness engineering, CLI onboarding, Copilot Spaces, usage metrics, and LSP setup.
Run day-to-day Git and GitHub workflows: conventional commits and branches, issue and release management, pull request review loops, dashboards, Dependabot, and contribution guardrails.
Open Horizons agentic DevOps platform toolkit for Azure, AKS, Backstage, AEG, GitHub, Azure DevOps, Terraform, security, reliability, architecture, and deployment operations. Use it to install specialist agents, reusable skills, safety hooks, MCP integrations, and a safe publisher for repository customizations.
Drive work from written specifications: author and update spec files, derive GitHub issues and epics, break down features and test plans, write product requirements, and refine a request before implementation.
Spec Driven — orchestrator-first Agent Skills for spec-driven development. The orchestrator skill turns a PRD or idea into approved SPECs, tracked GitHub Issues, TDD-implemented slices, QA gates, and reviewed PRs. Includes gap-analysis, write-specs, execute-specs, scaffold-mvp, create-issues, qa-analyst, code-review-and-quality, sonarqube-autofix, draw.io/Mermaid architecture diagrams, and MCP integrations.
Kubernetes suite — Argo CD application authoring (GitOps Application/ApplicationSet manifests, sync policies, AppProjects), Helm chart authoring, KEDA event-driven autoscaling, Keycloak IAM (Operator + CRDs, realm/client configuration, OIDC/SAML integration, security hardening), OpenShift application packaging, and k8s-components-checker (cross-component compatibility registry for RKE2 community stacks — kubectl/helm/pluto cluster survey, structured verdict + pre-upgrade report wrapper, skill-improver freshen and operator floor-override flows; covers 19 components: RKE2, Rancher, Harvester, Cilium, Tetragon, cert-manager, Kyverno, KEDA, Argo CD, Harbor, Traefik, Rook, Ceph, OpenEBS, GitLab, ECK, Zalando postgres-operator, Grafana Mimir, NVIDIA GPU Operator), plus rancher-upgrade — community Rancher fleet upgrade methodology (KDM downstream support matrix, CAPI→Turtles migration, Fleet, air-gapped upgrade procedure, per-minor 2.11→2.14 runbook), companion to k8s-components-checker. Harv
kubernetesHook-based security firewall and supply-chain verifier for Claude Code skills, MCPs and agents. Gates destructive git, secret and credential reads, exfiltration, download-and-run, self-tampering and Solana on-chain actions; grades and pins skill packs.
Shared code review workflows, verification protocol, git commands, feedback handling, and skill tooling
Security scanning across SAST, DAST, SCA, secrets and SBOM: Semgrep, CodeQL, SonarQube, ZAP, Nuclei, Snyk, OSV-Scanner, gitleaks, Syft and Trivy. Also covers language-native SAST linters, Dependabot and Renovate, package-manager audits, reachability and CVE exploitability triage, secret rotation, and VEX. A gate agent (security-finding-triager) normalizes, dedupes and waiver-checks multi-scanner output, including IaC findings from qa-iac, into one BLOCK / PASS verdict per domain. Every scanner skill includes a false-positive triage section.
security-compliance