12 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 12 plugins that match these filters.
lawve-ailawve-ai/awesome-legal-skills1
magnus-agent-skillsmagnus919/agent-skills1Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplaceGet products ready for the EU Cyber Resilience Act (Regulation 2024/2847). Four deterministic stdlib scripts: a scope classifier that sorts a portfolio into default, important class I/II and critical (Annex III/IV), blocks conformity routes Article 32 does not allow, checks support periods and names the CSIRT for Article 14 reports; an Article 14 clock for the 24h/72h/14-day/one-month deadlines live since 11 September 2026; an Annex I/II/VII gap check before the EU declaration of conformity; and an SBOM floor check for CycloneDX and SPDX. Ships cs-cra-officer agent, /cs-cra-readiness and /cs-cra-report commands, 3 cited references and an Article 14 runbook.
Get medical device software through IEC 62304 and IEC 81001-5-1. Four deterministic stdlib scripts: a software safety classifier (62304 4.3 with A1 external controls and segregation) that also sets the FDA Basic/Enhanced documentation level and flags 524B cyber devices; a lifecycle gap check scoped by class, with IEC 81001-5-1 security activities; a SOUP register check with SBOM cross-check; and a trace matrix release gate. Ships cs-device-software-lead agent, /cs-medical-device-software and /cs-soup-review commands and 4 references with per-claim confidence levels.
Football data analytics toolkit. Covers football provider docs, identity surfaces, and analytics workflows including Opta, StatsBomb, Wyscout, SportMonks, soccerdata, mplsoccer, databallpy, and free sources. Acquire, wrangle, compute, analyse, brainstorm visualisations, and review your work. Includes a searchable MCP docs server, Reep Register lookup routing, 11 skills, and 3 agents.
Security scanning across SAST, DAST, SCA, secrets and SBOM: Semgrep, CodeQL, SonarQube, ZAP, Nuclei, Snyk, OSV-Scanner, gitleaks, Syft and Trivy. Also covers language-native SAST linters, Dependabot and Renovate, package-manager audits, reachability and CVE exploitability triage, secret rotation, and VEX. A gate agent (security-finding-triager) normalizes, dedupes and waiver-checks multi-scanner output, including IaC findings from qa-iac, into one BLOCK / PASS verdict per domain. Every scanner skill includes a false-positive triage section.
security-complianceExpert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the EU. Use this skill for gap analysis, product classification (Default / Class I / Class II), conformity assessment route selection, CE marking, SBOM requirements, vulnerability and incident reporting to ENISA/CSIRTs, support period obligations, and manufacturer/importer/distributor duties. Trigger for EU CRA, Cyber Resilience Act, PDE compliance, Annex I requirements, SBOM EU, CE marking cybersecurity, or connected product security EU.
Design, automate, and operate end-to-end software releases: release process models and pipelines (trunk-based development, CD stages, release trains), progressive delivery and feature flags, versioning and artifact management (SemVer, conventional commits, changelogs, SBOM/provenance), readiness and quality gates, rollback and recovery planning, change-management and audit compliance (SOC 2, SOX, PCI), DORA metrics, and multi-team release coordination. Do not use for application feature implementation (backend-engineering/frontend-engineering), production incident root-cause debugging or on-call/SLO operations (systematic-debugging / site-reliability-engineering), security implementation or threat modeling (secure-software-engineering), or internal developer platform construction (platform-engineering).
Official-doc-first Yocto Project and BitBake skills: route to current documentation, debug BitBake build failures, and review recipes, layers, images, BSP/kernel metadata, and security/SBOM workflows.
development8 skills: Operate delegates, IaCM workspaces, cloud development environments, artifact registries, SBOMs, supply chain and pull requests.
Assess and enhance software projects for enterprise-grade security, quality, and automation. Includes supply chain security (SLSA, signing, SBOMs), quality gates, and platform-specific hardening with dynamic scoring.
Conformance and hardening for deployable TYPO3 v14 site/project repos (type:project + Docker/Compose): layout, Compose topology, Concourse CI, supply-chain gating (Trivy/SBOM/cosign), secret-free config, Valkey/ofelia runtime. Site/project counterpart to typo3-conformance.
Application-security & compliance QA role bundle: one-command install of unified security scanning (SAST, DAST, SCA, secrets, SBOM), fuzzing, compliance, multi-tenancy isolation, test-data privacy, and IaC policy testing.
role-bundles
Assess and enhance software projects for enterprise-grade security, quality, and automation. Use when evaluating projects for production readiness, implementing supply chain security (SLSA, signing, SBOMs), hardening CI/CD pipelines, or establishing quality gates. Aligned with OpenSSF Scorecard, Best Practices Badge (all levels), SLSA, and S2C2F. By Netresearch.
