Claude Code plugins
71 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 71 plugins that match these filters.
71 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 71 plugins that match these filters.
Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplaceProduction incident management, triage workflows, and automated incident resolution
Builds source and binary code graphs for security analysis, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.
Email-workflow skill pair: inbox-setup builds your taxonomy/KB; inbox-triage classifies + drafts (drafts-only, never auto-send). KB-file contract between them. Path-B from megaprompts 06+07.
Executive-function & focus skills for getting unstuck and running your own brain: beat activation-energy paralysis, triage overwhelm, protect your energy, build a personal memory file, and make hard decisions when depleted. ADHD-friendly, useful for everyone.
Consumer digital self-defense skills: identity-theft recovery, data-broker removal, account recovery, ransomware first response, backups, phishing triage, passwords & 2FA, kids' online safety, securing a lost phone, oversharing audit, doxxing response, and safe online shopping.
12 Claude Cowork-native skills that act on your real data through connectors and the sandbox — Gmail/Calendar inbox triage, meeting prep and follow-up sweeps; Drive/Docs/Sheets audits, restructures and decks; Notion/Slack decision logs, DB hygiene and async standups; GitHub/Linear issue triage, PR descriptions and changelogs. Each drives real tools and returns an artifact — not a framework you run by hand.
Operations & procurement skills: Process Documentation, SOP Writer, Vendor Evaluation, RFP Writer, Vendor Contract Checklist, Project Status Report, Workshop Facilitation Guide, Risk Register, RACI Matrix, Email Triage, Morning Intelligence. Document workflows, write SOPs and RFPs, review vendor contracts, build risk registers, define RACI matrices, triage your inbox, and auto-generate a morning news brief.
Real mobile devices on demand via Kobiton's remote MCP — no emulators, no flaky CI. 12 tools across Devices, Sessions, and Apps surfaces, plus specialist agents for device picking, Appium capability reconciliation, and session triage.
Dental practice: treatment plan presentation, clinical notes, insurance pre-auth, emergency triage, recall and referrals.
Insurance professional skills: claims triage with coverage-trigger checks, underwriting file narratives, pre-renewal reviews, and risk-register coverage-gap analysis — analytical support for claims handlers, underwriters, and brokers.
Hands-on application & operational security skills: Threat Model (STRIDE), Security Review, Vulnerability Triage (CVSS), Security Incident Response, and Pentest Report. Defensive security and authorized testing for systems you own or are permitted to assess.
The post-draft lifecycle nobody else covers: CFP requirement parsing, venue/track selection and tailoring, desk-reject preflight, anonymization, review triage, benchmark scorecards, rebuttals in all three real formats, and camera-ready rails for ACM and IEEE.
OpenText Fortify AppSec skills. Use for SAST/DAST/SCA scanning, vulnerability triage, audit workflows, remediation, dependency upgrades, CI/CD pipeline integration, and FCLI commands. Supports Fortify on Demand (FoD) and Software Security Center (SSC).
The layoff kit: decode the severance agreement, triage the finances, secure references, and craft the announcement — the four artifacts of a layoff handled well
Write, review, and triage property-based tests — Hypothesis, fast-check, proptest, and Echidna or Medusa for Solidity invariants
Principled framework for triaging vulnerability reports using 7 brocards (rules of thumb). Evaluates incoming CVEs, bug bounty submissions, and security findings against structured dismissal/acceptance criteria before escalating to deeper analysis.
Triages a repository's open GitHub issues and pull requests via the gh CLI: optionally merges ready bot and maintainer-approved PRs and spawns review subagents for unreviewed ones, closes already-resolved issues with referenced explanations, cross-links issues with pending fix PRs, and assigns local-only priority and change-size estimates.
Kelly's App-in-Skill business tools: email inbox-zero, money ledger, finance anomaly audit, personal CRM, unified chat inbox, inquiry-to-quote desk, ticket triage & dispatch, lesson-plan compliance, social media aggregation, Search Console SEO desk, user feedback roadmap, market intelligence radar, fleet ops monitoring, content repurposing, GitHub PR review, short-drama & music-video production, team standup board, cross-border e-commerce (product research, listing factory, ads desk), and multi-agent rule setup. Each bundles a local browser UI for human review and approval.
Security find-and-fix loop — adapted (Apache-2.0) from anthropics/defending-code-reference-harness and generalised to all vulnerability classes. Four read/write-only skills (no target-code execution): threat-model (bootstrap from code+CVEs+git-history, or interview an owner via Shostack's four questions, or both -> THREAT_MODEL.md), vuln-scan (static source review, parallel per-focus-area subagents -> VULN-FINDINGS.json), triage (adversarial N-vote verification, 16 false-positive exclusion rules, root-cause dedup, impact-on-asset x exploitability severity with stated deployment conditions, owner routing, checkpoint/resume -> TRIAGE.json), and patch (root-cause candidate diffs + independent reviewer, fix-first priority for deployment-conditional dangerous primitives, never auto-applied -> PATCHES/). The autonomous C/C++ + AddressSanitizer execution pipeline this was extracted from is referenced, not bundled (vuln-scan/HARNESS.md).
securityTiered AI code-review: triage -> relevant specialist reviewers -> synthesis. Built to catch what AI-written code actually ships with: code that ignores what the repository already knows, needless dependencies, over-engineering, hallucinated APIs.