Плагины Claude Code
4 плагинов из публичных маркетплейсов Claude Code. Каждый объединяет навыки, слэш-команды, агентов, хуки или MCP server, которые устанавливаются вместе.
Показано 4 плагинов, соответствующих фильтрам. Очистить фильтры
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
Security scanning across SAST, DAST, SCA, secrets and SBOM: Semgrep, CodeQL, SonarQube, ZAP, Nuclei, Snyk, OSV-Scanner, gitleaks, Syft and Trivy. Also covers language-native SAST linters, Dependabot and Renovate, package-manager audits, reachability and CVE exploitability triage, secret rotation, and VEX. A gate agent (security-finding-triager) normalizes, dedupes and waiver-checks multi-scanner output, including IaC findings from qa-iac, into one BLOCK / PASS verdict per domain. Every scanner skill includes a false-positive triage section.
security-compliance
Assess and harden application security: source vulnerability review, secret scanning, CodeQL scanning, STRIDE and TM7 threat models, data-breach blast radius, and GDPR engineering practices.
4 security skills: agent security scanning, CodeQL/Semgrep, sandbox hardening, secret protection