18 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 18 plugins that match these filters.
claude-code-workflowswshobson/agents1
aiwgjmagly/aiwg1
apisec-skillsapisec-inc/apisec-skills1
suedeJasonColapietro/suede-creator-skills1Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplaceSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
25-skill pentest pack with engagement governance, network/code/dependency scans, OWASP Top 10 mapping, and exec-readable reporting. Heavy-hitter compliant; chain-of-custody attestable.
Applied security framework for cryptographic primitive selection, chain-of-trust design, authentication factor analysis, supply-chain trust, and physical-threat modeling. Complements OWASP-style application audits.
Automated security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues
Scan APIs for security vulnerabilities and OWASP API Top 10
LLM and prompt evaluation with Promptfoo, DeepEval and Ragas, Giskard vulnerability scans, Langfuse tracing, and golden-dataset regression suites. Audits eval suites for methodology errors. Agents (prompt-eval-reviewer, llm-red-team-planner) review an eval suite and plan adversarial probe campaigns across the OWASP LLM Top 10.
ai-mlOWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
Authentication flow testing: OAuth 2.0 with PKCE, multi-factor authentication, and session management, plus Keycloak, Auth0 and Okta integration tests. Anchored on RFC 7636, RFC 9700 and OWASP ASVS V3. A critic agent (token-storage-security-critic) flags tokens in localStorage, auth cookies missing httpOnly / Secure / SameSite, and tokens leaking into logs or URLs.
integrations-protocolsCode quality subset: one-pass review and A-F ship verdict with TypeScript, React, Next.js, OWASP, and database checklists, plus findings-only and grade-only modes (suede-code), and CI branch protection that gates the merge (suede-ci-gate).
Apply the SAIL V2 (Secure AI Lifecycle) framework to secure AI applications and agents — gap analyses, security roadmaps, maturity assessments, compliance checklists (ISO/IEC 42001, EU AI Act, OWASP, DASF, AIUC-1), control prioritization, and vendor RFPs. Grounded in the full 91-risk SAIL catalog.
securitySecurity skills — OWASP audits, secret scanning, and dependency supply-chain hardening
iOS Security Audit against OWASP MASVS v2.1.0. Use when reviewing code for vulnerabilities, auditing Keychain usage, checking ATS, or mapping compliance.
Secure-coding gates for AI-written code: 70 numbered gates mapped to OWASP Top 10 and CWE, plus a pre-write guard that stops the write when it can prove the failure.
securityPre-launch security audit for web apps. Runs OWASP checks via shell scripts, then AI analyzes findings.
securityCheck OWASP Top 10 compliance
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need.
Security audit patterns for PHP applications following OWASP guidelines. Covers XXE, SQL injection, XSS, CSRF detection, CVSS v3.1 scoring, and secure coding practices. By Netresearch.
Professional smart contract security audits with OWASP Top 10 coverage
