Claude Code plugins
15 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 15 plugins that match these filters.
15 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 15 plugins that match these filters.
Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplace45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, Op
32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security, incident-response, red-team, threat-detection. v2.8.1 audits senior-fullstack / senior-frontend / senior-backend against karpathy-coder + Matt Pocock — each ships a 7-question forcing-question library, 4 customization profiles (JSON), deterministic decision engine, composition map into POWERFUL specialists, plus cs-fullstack-engineer / cs-frontend-engineer / cs-backend-engineer orchestrator agents (context: fork) + /cs-fullstack-review, /cs-frontend-review, /cs-backend-review, /cs-engineer-grill slash commands.
Systematic false positive verification for security bug analysis with mandatory gate reviews
PreToolUse security reminder hook for Claude Code. Catches 12 common security anti-patterns in Edit/Write/MultiEdit operations BEFORE they happen — command injection (exec, os.system, subprocess shell=True), XSS (innerHTML, dangerouslySetInnerHTML, document.write), SQL injection (f-string queries, .format), unsafe deserialization (pickle, yaml.unsafe_load), code injection (eval, new Function), and GitHub Actions workflow injection. Session-state caching prevents duplicate warnings; 30-day auto-cleanup. Disable per-session with ENABLE_SECURITY_REMINDER=0. Ported from David Dworken at Anthropic.
Apache Magpie security family (16 skills).
Skills, rules, hooks, agents and output styles for Claude Code: test-gated landing for parallel agent work, framework knowledge with staleness verifiers, and security checks aimed at the agent itself
A portable collection of 74 skills for software delivery, architecture, security, product leadership, and academic research.
Hook-based security firewall and supply-chain verifier for Claude Code skills, MCPs and agents. Gates destructive git, secret and credential reads, exfiltration, download-and-run, self-tampering and Solana on-chain actions; grades and pins skill packs.
AI Team Kit - 25 skills covering the software delivery lifecycle of a company project team: choosing the next skill from the project's state, carrying several pieces of work through the lifecycle at once, project profile setup, per-team skill overrides, requirement intake, catching up on work in flight, estimation, technical design, reference specs for API, schema and feature, task breakdown, conventions, implementation planning, implementation, bug fixing, runtime verification, code review, QA, test case execution on a deployed environment, security review, version control, release, incident response, retrospective, onboarding, and handover
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers. 29 scanners detect prompt injection, MCP tool poisoning, credential exposure, malicious lifecycle hooks, package IOCs, CVEs, CISA KEV exposure, and post-incident traces. Zero dependencies. Zero telemetry.
Sixteen general-purpose Salesforce admin & developer skills — Apex, Flow, SOQL/Data, LWC, Metadata, Permissions, Diagrams, Org Audit, Test Generation, Security Review, Debug Log Analysis, Org Comparison, Integrations, Record Stewardship, Campaign Analytics, and Lead Enrichment — that work with any Salesforce MCP server.
Self-contained agentic development harness: one command runs the full feature pipeline with double review and security gates.
Apache Magpie — the framework tools the skills run as <framework>/tools/<tool> (security tracker edits and CVE JSON, PR and release management, contributor metrics, the privacy gate, setup's permission audit), shipped so a marketplace install needs no framework checkout. The name is historical: every family that runs one of these tools needs this plugin.
Operate ArvanCloud APIs, DNS records, Cloud Server/IaaS, Object Storage, VOD/Live, CDN/Security, and Let's Encrypt DNS-01 certificates via acme.sh dns_arvan.
Architecture-aware engineering principles framework for Claude Code. Provides systematic, tiered workflows for bug fixes, new features, refactoring, code review, test writing, requirements refinement, debugging, shipping, sprint planning, migrations, and security audits.