Plugins · Security & identity

48 listings on this page, in order of arrival. Each one has its own page with README, repository facts and source links.

1. security-sweep ★ 6
   Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command injecti
2. sentinal-stack ★ 3
   10 specialized agents that embed DLP, EU AI Act compliance, and real-time audit evidence into your AI workflows — so compliance happens auto
3. shieldcode ★ 3
   Security hardening and production-grade error handling expertise for Claude Code. Prevents OWASP Top 10 vulnerabilities (SQL injection, XSS,
4. simplyprint-3d-printing ★ 1
   Manage your SimplyPrint 3D printer farm from Claude: monitor printers, control prints, run your queue, and troubleshoot in plain English. Th
5. skillcheck-free ★ 36
   SkillCheck Free validates Claude Code SKILL.md files against ~25 contract rules covering structure, naming, semantic consistency, and qualit
6. slice-global ★ 9
   Official Slice plugin for Claude. Ask Claude about your cap table, grants, share classes, ESOP pools, compliance posture, valuations, workfl
7. smb-cybersecurity-policy-kit ★ 1
   Generate NIST CSF 2.0-aligned cybersecurity policies for small and mid-size businesses. Five production-ready generators (Acceptable Use, In
8. smb-hr-compliance-pack ★ 1
   Generate state-compliant HR documents for small and mid-size businesses. Five production-ready generators covering Offer Letter, Employee Ha
9. sosa-compliance-checker ★ 9
   Audit your Claude plugins, skills, and coding agents against the SOSA methodology — Supervised Orchestrated Secured Agents. Scans your entir
10. stackhawk-skills-for-claude ★ 16
    Your AI coding agent is also your security team. StackHawk skills teach Claude to find security vulnerabilities as you build, report your se
11. statsclaw ★ 92
    StatsClaw orchestrates 9 specialized AI agents (leader, planner, builder, tester, scriber, simulator, distiller, reviewer, shipper) through
12. supergraph ★ 22
    Supergraph là plugin cho Claude Code, kết hợp hai phương pháp: - **Superpowers** (obra): Bắt buộc AI tuân theo quy trình làm việc có kỷ luật
13. swiftui-guidance-for-macos ★ 11
    Runtime-level SwiftUI guidance for macOS apps. Covers observation internals, concurrency scheduling, view identity, performance, AppKit brid
14. swiftui-macos-skill ★ 11
    Expert SwiftUI guidance for macOS apps — runtime-level understanding of observation, concurrency, view identity, and platform integration. B
15. tailwind-design-system
    Design system builder and refactorer for Tailwind CSS + Next.js projects. Audits existing styles, defines semantic color/typography tokens,
16. tigris-storage ★ 1
    Tigris object storage integration — CLI reference for bucket management, object operations, access keys, IAM, and migrations. Skills cover a
17. usap-skills ★ 4
    66 LLM security agent skills for the Unified Security Agent Platform (USAP). Covers threat detection, incident response, red team operations
18. vault-pkm ★ 13
    Personal knowledge management for Claude Code. Connect to your Obsidian vault with 20 MCP tools, semantic search, wikilink graph traversal,
19. visual-test-pro
    Visual Test Pro is a Claude Code plugin that visually tests your entire app in Chrome, catches security vulnerabilities, handles authenticat
20. webscan
    Client-side web security scanner — detects secrets, vulnerable JS libraries, misconfigurations, XSS sinks, CORS issues, and more
21. descope-skills ★ 13
    Descope authentication skills: integration, Auth0/Okta/WorkOS/Stytch migration, Terraform, FGA authorization schemas, security review, and B
22. neus-trust ★ 23
    Verified identity, limited permissions, reusable trust receipts, and Vault secrets. One setup for Cursor, Claude Code, Codex, and VS Code.
23. Human Resources ★ 23,994
    Streamline people operations — recruiting, onboarding, performance reviews, compensation analysis, and policy guidance. Maintain compliance
24. Operations ★ 23,994
    Optimize business operations — vendor management, process documentation, change management, capacity planning, and compliance tracking. Keep
25. Configuration & Troubleshooting ★ 47
    Guides configuration of @Claude agents — agent scopes, identity profiles, connections, repos, and instructions — and diagnoses plugin/skill
26. Auth0 ★ 119
    Manage your Auth0 tenants, apps and APIs.
27. sonarqube ★ 102
    SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leake
28. stackhawk ★ 16
    StackHawk security scanning and API reporting skills. AUTONOMOUS: After completing any code change, invoke the hawkscan skill to scan, fix a
29. remote-desktop-commander ★ 19
    Official remote MCP server for Desktop Commander — connect claude.ai, ChatGPT, Cursor and more to your own computer over OAuth
30. ponytail-sec ★ 8
    Ponytail security companion and audit: diff-scoped hardening for active development, plus full-project security scans.
31. accordo ★ 2
    Accordo builds custom CRMs and Customer Hubs as code. Smart CRM stays policy-governed; for CDP + CRM, Accordo is the process layer with boun
32. sast-mcp-server ★ 2
    SAST/DAST vulnerability scanner for AI agents — 11 scanners (Bandit, njsscan, Bearer, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner
33. transmit-security-journey-builder ★ 2
    Create Identity Orchestration (IDO) Journeys for Transmit Security's Mosaic platform
34. Sensei Cyber Mentor ★ 2
    An AI cybersecurity mentor integrated with Blackfin OS tools.
35. fiber-ai ★ 2
    Fiber AI MCP extension. fiber-ai-v2 exposes auto-generated direct tools for the top ~10 priority operations (API-key auth). fiber-ai-v3 expo
36. comply ★ 1
    Gemara compliance pipeline and policy generation via MCP server
37. fianu-skills ★ 1
    Skills for building AI agents that operate on the Fianu compliance platform.
38. android-management-api
    Access enterprise mobility data using natural language queries about device fleets, automated auditing of policy compliance, and the integra
39. inclusify
    Accessibility and WCAG compliance data for websites in your Inclusify account.
40. freelaw-studio
    Freelaw Studio office workflows via public MCP (OAuth 2.1 PKCE).
41. ory
    Ory authentication, authorization, and activity auditing for Gemini CLI
42. superhacker
    Authorized-security router. Use for /superhacker, pentest, vulnerability triage, red team, hardening, or CTF.
43. xfa-mcp
    XFA's remote MCP server — query your organization's device posture, compliance, policies, and software/CVE status from Gemini. Read-only.
44. traitprint
    Portable, user-owned career vault. Query skills, STAR stories, and philosophies via the hosted Traitprint MCP server, and build the vault wi
45. okta-mcp-server
    A collection of MCP servers to interact with Okta.
46. pkm
    Clip AI sessions to an Obsidian vault, resolve vault conflicts, and file URLs into Karakeep
47. prompeteer
    Generates contextual prompts and agent skills tuned to 140+ AI platforms, with a 16-dimension Prompt Score and a saved prompt vault. Free to
48. bean-descale
    System Resilience, Day 2 SRE, and Codebase Modernization: Chaos engineering, vulnerability scanning, security remediation, and app assessmen