19 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 19 plugins that match these filters.
skillmdskillmds/SkillMD1
alexei-led-cc-thingzalexei-led/cc-thingz1
benai-skillsnaveedharri/benai-skills1
apache-magpieapache/magpie1Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplaceProduction-grade Bash scripting with defensive programming, POSIX compliance, and comprehensive testing
Roll Claude Code out to a team with guardrails you can check. Four deterministic stdlib scripts: a settings linter that reads shared, local, user and managed settings together (array merge, deny-ask-allow order) and blocks blanket shell allows, pre-approved destructive commands and committed credentials; an MCP and plugin inventory that blocks anything missing from your approved list or holding a literal secret, and flags unpinned or plain-http servers; a CLAUDE.md layering audit that resolves every layer and @import and flags broken imports, contradictions, secrets and resident size; and a privacy-safe adoption tracker that turns local session files into counts only and classifies the rollout as PILOT, SPREADING, EMBEDDED or STALLED. Ships cs-claude-code-rollout agent, /cs-claude-rollout and /cs-claude-settings-lint commands, 3 references, a baseline managed-settings policy and a four-phase rollout plan.
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
PreToolUse security reminder hook for Claude Code. Catches 12 common security anti-patterns in Edit/Write/MultiEdit operations BEFORE they happen — command injection (exec, os.system, subprocess shell=True), XSS (innerHTML, dangerouslySetInnerHTML, document.write), SQL injection (f-string queries, .format), unsafe deserialization (pickle, yaml.unsafe_load), code injection (eval, new Function), and GitHub Actions workflow injection. Session-state caching prevents duplicate warnings; 30-day auto-cleanup. Disable per-session with ENABLE_SECURITY_REMINDER=0. Ported from David Dworken at Anthropic.
Idiomatic development across C# /.NET, Go, Java/Kotlin, Python, Rust, TypeScript, shell, and web
From nothing to a working AI setup you own. Scans the machine for models that fit, installs and wires up the right app with consent at every download, shares it over a private URL, and rents a cloud GPU when a model is too big. Needs shell access.
Apache Magpie — deterministic pre-execution command guard: a PreToolUse hook that denies shell commands which would break a hard framework rule. Runs from the installed plugin, so no repository or worktree needs a local copy.
Keep a large Obsidian vault tidy — file new notes into the best-fit folder and audit/reorganize existing structure, driven by a single source-of-truth map note (00_Index/Folder_Map.md) that lives inside the vault. Link-safe by design: all moves/renames go through the obsidian CLI so wikilinks auto-repair, never raw shell. Propose-then-confirm for bulk reorganizations.
Discipline mode (staged planning, receipts, verify-against-source, adversarial review) + plan/kickoff commands + a plan-reviewer agent + an always-on SessionStart discipline injector + a Stop-hook autonomous loop (Layer 1, a deterministic gate) that can arm itself from a committed, content-hash-trusted .claude/tale-mode.json during a kickoff phase + a fail-closed plan-mode auto-approve for provably read-only shell (no more permission-dialog walls during investigation).
productivityAdminister and troubleshoot remote Linux, FreeBSD, NetBSD, OpenBSD, and macOS systems safely, one host or a fleet at a time. Use when a task requires SSH, Ansible, Paramiko, POSIX diagnostics, service management, software updates, system configuration, firewall changes, or evidence-led remote operations. Do not use for local-only desktop administration, container or cluster orchestration (route to kubernetes), or cloud consoles that expose no remote shell.
CLI and terminal UI testing: Bats for shell scripts and binaries, Pester for PowerShell, TUI snapshot tests, and conventions for testable CLI output. Snapshot tests capture rendered terminal frames as text or SVG and diff them on every run; the output conventions cover exit codes, stdout vs stderr, and machine-readable modes.
toolingPreset CLI skills for shell, scripting, and CI/CD workflows driven by the `sup` CLI (PyPI package `superset-sup`). Use only for CLI workflows; do not use for MCP-only work, and do not use as a substitute for direct HTTP/SDK code.
developmentPre-launch security audit for web apps. Runs OWASP checks via shell scripts, then AI analyzes findings.
securityTeaches Claude to use shell commands efficiently — avoid re-running expensive commands and stop tail/head chasing.
Run NVIDIA OpenShell 0.1.x
Compute infrastructure skills from broomva/skills: agentic-vps, colab-remote, fleet-host, forkable-shell, remote-gpu.
Build native iOS and Android apps as verifiable twins on Duet: pure reducers, SwiftUI and Jetpack Compose shells, record/replay fixtures checked byte-for-byte in CI, and the duet CLI.
developmentEleven canonical Anthropic Agent Skills for software engineering — running-tdd-cycles, reviewing-changes, designing-architecture, creating-block-issues, implementing-blocks, committing-changes, plus per-language conventions for Python, Go, Solidity, shell, and engineering-philosophy.
development
