Security Claude Code Plugins
212 plugins for security — ranked by real GitHub stars, refreshed continuously, never faked.
# Plugin Stars
1 
ecc affaan-m/ECC The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude… 232k ★ 2 
trailofbits trailofbits/skills Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 6.2k ★ 3 
autoresearch uditgoenka/autoresearch Claude Autoresearch — autonomous goal-directed iteration for Claude Code. 14 commands: iterate, plan, debug, fix, security, ship,… 5.4k ★ 4 
elementalsouls elementalsouls/Claude-BugHunter A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patter… 3k ★ 5 
shiro-attack2 SummerSec/ShiroAttack2 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 利用工具 — 密钥爆破、Gadget 链探测、命令执行、内存马注入、Key 修改。 2.6k ★ 6 
tanweai-security tanweai/wooyun-legacy wooyun-legacy skill for claude code 1.7k ★ 7 
pm-claude-skills mohitagw15856/pm-claude-skills PM stands for Professional, not just Product Management. 515 Claude Skills + 4 agent templates across 74 bundles covering 31 prof… 1.2k ★ 8 
clawsec prompt-security/clawsec A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') wi… 1.1k ★ 9 
grc-skills Sushegaad/Claude-Skills-Governance-Risk-and-Compliance Claude Code skills for Governance, Risk & Compliance — ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecuri… 773 ★ 10 
ghost-security ghostsecurity/skills Ghost Security's collection of AppSec skills for AI coding agents 399 ★ 11 
ai-design-components ancoleman/ai-design-components Comprehensive full-stack development skills for AI-assisted development covering UI/UX, backend, DevOps, infrastructure, security… 388 ★ 12 
aidevops marcusquinn/aidevops Vibe-Coding is easy. DevOps is hard. OpenCode & Git token-efficient AI agent automation for your app, business, and personal deve… 343 ★ 13 
ksafe ioannisa/KSafe Agent skills for the KSafe Kotlin Multiplatform encrypted persistence library 314 ★ 14 
claude-sync tawanorg/claude-sync Sync Claude Code sessions across devices using Cloudflare R2 with end-to-end encryption 227 ★ 15 
cybersecurity-skills Masriyan/Claude-Code-CyberSecurity-Skill A comprehensive collection of 15 Claude Code Skills for cybersecurity professionals ,covering offensive security, defensive opera… 194 ★ 16 
agent-sec-ops-kit-skills AgentSecOps/SecOpsAgentKit Security operations toolkit for AI coding agents. Give Claude Code 25+ skills to catch vulnerabilities, scan containers, detect s… 179 ★ 17 
superpowers-symfony MakFly/superpowers-symfony Claude Code plugin for Symfony 7.4 LTS & 8.x — 44 skills, 7 AI subagents & 13 commands for API Platform v4, Doctrine ORM 3, TDD (… 179 ★ 18 
x-twitter-scraper Xquik-dev/x-twitter-scraper Xquik agent Skill for REST, OAuth-first MCP, webhooks, exports, tweet search, follower data, monitoring, and confirmation-gated p… 162 ★ 19 
01coder-agent-skills sugarforever/01coder-agent-skills Skills for creators and developers — content creation, publishing, analytics, and security scanning 125 ★ 20 
agent-security-playbook OWASP/secure-agent-playbook OWASP Secure Agent Playbook — security skills for code analysis and AI/agent security 124 ★ 21 
quillshield-security-skills quillai-network/quillshield_skills Structured skills for smart contract security audits. Infers state invariants, detects semantic guard gaps, models flash loan + o… 115 ★ 22 
fort djadmin/fort Audit and fix your Mac's security in one command. No agent, no signup, open source. 72 ★ 23 
shipyard lgbarn/shipyard Ship software systematically: project lifecycle, TDD, parallel agents, code review, security auditing, and infrastructure validat… 66 ★ 24 
equilateral-agents Equilateral-AI/equilateral-agents-open-core EquilateralAgents - 22 self-learning AI agents with community standards contribution. Features agent memory, pattern recognition,… 59 ★ 25 
califio califio/skills Claude Code plugins and Codex skills from Calif.io for AI-assisted security research and code auditing 58 ★ 26 
don-cheli doncheli/don-cheli-sdd Don Cheli — SDD Framework. The most comprehensive Specification-Driven Development framework for AI agents. 88+ commands, 51 skil… 56 ★ 27 
netresearch-claude-code-marketplace netresearch/claude-code-marketplace Curated Agentic Skills for AI coding agents — TYPO3, PHP, Go, Docker, Jira, security, and more. Platform-agnostic skills followin… 46 ★ 28 
orcasecurity orcasecurity/orca-skills Skills and plugins to accelerate security workflows with the Orca Cloud Platform 46 ★ 29 
armoriq armoriq/armorClaude Intent-based security plugin for Claude Code - registers a plan per prompt and enforces policy on every tool call via hooks. 44 ★ 30 
prodsec-skills RedHatProductSecurity/prodsec-skills Security skills for AI coding assistants and agentic systems 43 ★ 31 
enterprise-harness-engineering addxai/enterprise-harness-engineering Enterprise-grade AI Agent Skills for software development, DevOps, SRE, security, and product teams. Compatible with Claude Code,… 41 ★ 32 
kernel-vuln-analyzer winmin/kernel-vuln-analyzer Claude Code skill for Linux kernel vulnerability analysis — from crash log triage to patch verification 39 ★ 33 
sentinelx-prime-dev alicankiraz1/SentinelXPrime Development marketplace for the SentinelXPrime security skill suite 37 ★ 34 
glincker-marketplace glincker/claude-code-marketplace Community-driven Claude Code marketplace with specialized AI agents for the full SDLC. Features multi-agent coordination, workflo… 34 ★ 35 
alien-agent-id alien-id/agent-id A portable cryptographic identity, encrypted credential vault, and logged-in browser for AI agents. The agent uses your API keys… 33 ★ 36 
northflank northflank/skills An agent skill for deploying, operating, and automating workloads on Northflank. Includes guidance and references for services, j… 31 ★ 37 
skill-fetch girofu/skill-fetch Multi-registry skill discovery and installation for AI coding agents — search 9 sources, score, paginate, and install agent skill… 29 ★ 38 
swift-security-skill ivan-magda/swift-security-skill AI agent skill for secure credential storage & cryptography on Apple platforms - Keychain Services, biometric auth, CryptoKit, an… 28 ★ 39 
autoresearch wjgoarxiv/autoresearch-skill Autonomous research loops for any domain. 10 commands: core loop, plan, debug, fix, predict, security, scenario, reason, ship. 26 ★ 40 
llm-autonomous-agent-plugin-for-claude bejranonda/LLM-Autonomous-Agent-Plugin-for-Claude Autonomous self-learning agent plugin for Claude Code — 36 specialized subagents in a 4-tier architecture (analysis, planning, ex… 26 ★ 41 
rl-protect-skills reversinglabs/rl-protect-skills Claude Code skills for Spectra Assure Community. Scan open source dependencies for malware, vulnerabilities, and policy violation… 26 ★ 42 
infisical-ai-skills Infisical/ai-skills AI skills and MCP connection for Infisical -- Stop your AI from hallucinating about Infisical secrets management. 25 ★ 43 
thumbgate-marketplace IgorGanapolsky/ThumbGate ThumbGate Pre-Action Checks derive rules from repeated failures, flag risky tool calls, hard-block detected secret leaks, and blo… 24 ★ 44 
github-autopilot Shweta-Mishra-ai/github-autopilot GitHub Autopilot — AI repo assistant. Analyze PRs, fix issues, scan secrets from your IDE. 22 ★ 45 
soundcheck thejefflarson/soundcheck Simple security reviews for AI agents 20 ★ 46 
frontend-craft bovinphang/frontend-craft Shared Claude Code plugin for frontend teams — agents, skills, hooks, and project templates for code review, design-to-code, arch… 19 ★ 47 
sentinel-ai-safety MaxwellCalkin/sentinel-ai Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscati… 19 ★ 48 
vibe-ship sudais-khalid/vibe-ship Marketplace for the vibe-ship plugin: generates and audits production-ready deployment setups (Docker, CI/CD, security, scalabili… 18 ★ 49 
dev-tools siva01c/claude-plugins Claude Code plugin marketplace: Drupal development, DDEV, Docker, CI/CD, git workflows, and OWASP ASVS security 17 ★ 50 
insightflo insightflo/claude-impl-tools A Claude Code skills and project-team toolkit repository for standardized workflows, governance automation, and quality/securi… 17 ★ 51 
claudesec Twodragon0/claudesec Security scanner, ISMS dashboard, and asset management for AI-assisted development 16 ★ 52 
fortify fortify/skills AI agent skills for OpenText Fortify — SAST/DAST/SCA scanning, vulnerability triage, CI/CD integration, and FCLI workflows. Works… 15 ★ 53 
skills schwepps/skills Claude Code skills: SEO audits, AI search optimization, music creation, smart contract security, LinkedIn personal branding, deve… 15 ★ 54 
product-forge-marketplace jpoutrin/product-forge Comprehensive product development toolkit with PRD management, technical specialists, and security expertise 14 ★ 55 
claude-skills-collection khalilbenaz/claude-skills-collection 349 professional skills for Claude Code — dev, cloud, security, AI/ML, business, career, and more 12 ★ 56 
descope-skills descope/skills Official collection of Descope authentication skills for AI coding agents 12 ★ 57 
dotnet-nuget-proxy logiclabs/dotnet-nuget-proxy-skill Claude Code skill plugin for fixing .NET NuGet proxy authentication issues 12 ★ 58 
florianbuetow-plugins florianbuetow/claude-code A collection of Claude Code plugins for software engineering workflows: SOLID principles analysis, system-level architecture prin… 12 ★ 59 
superpowers-ecc aman-2709/superpowers-ecc Disciplined workflow skills, security review, learning system, and cross-platform tooling 11 ★ 60 
docvet Alberto-Codes/docvet Comprehensive docstring quality vetting for Python projects 9 ★ 61 
clawjournal rayward-external/clawjournal ClawJournal — review, curate, and share your coding agent conversation traces. 100% local. Scans sessions from Claude Code, Codex… 8 ★ 62 
keeper-security Keeper-Security/keeper-agent-kit AI Agent skills and plugin marketplace for Keeper Secrets Manager CLI and Commander 8 ★ 63 
minhthang-plugins MinhThang1009/dotclaude A curated collection of Claude Code plugins for development workflows, code review, security, and productivity 8 ★ 64 
threat-modeling-toolkit josemlopez/threat-modeling-toolkit AI-powered threat modeling toolkit for Claude Code - STRIDE/PASTA framework support, compliance mapping, and security verification 8 ★ 65 
vulnetix-plugins Vulnetix/pix-ai-coding-assistant Vulnerability intelligence for Claude Code — scans dependencies on commit, searches packages, analyzes exploits, and proposes fix… 8 ★ 66 
attach-dev attach-dev/attach-guard Supply chain security plugin for Claude Code. Intercepts package installs across npm, pip, Go, and Cargo — blocks compromised pac… 7 ★ 67 
eyesecurity eyesecurity/skills EU compliance enforcement for AI agents. Org-profile-driven guardrails for NIS2, GDPR & ISO 27001 — blocks secrets, flags critica… 7 ★ 68 
Linear-Agent-Skills choam2426/Linear-CLI Agent-optimized Linear CLI for Claude Code, Cursor, Gemini CLI, and any AI coding agent — no OAuth, no MCP, no dependencies. 7 ★ 69 
msapps-plugins MSApps-Mobile/claude-plugins 29 free, open-source plugins for Claude Code & Cowork — Google Drive, WhatsApp, YouTube, WordPress, Apollo & more. Built on the S… 7 ★ 70 
skill-threat-modeling cga22099/skill-threat-modeling 🔍 Transform source code into actionable security insights with the Code-First Automated Threat Modeling Toolkit for deep risk an… 7 ★ 71 
automagik-workit automagik-dev/workit Fork of gogcli with headless OAuth and Drive sync for AI agents 6 ★ 72 
awesome-claude-security jassics/awesome-claude-security Claude code skills, agents, memory, profiles to accomplish cybersecurity tasks, projects, jobs with ease. claude-code, claude-pl… 6 ★ 73 
blindfold thesaadmirza/blindfold Blindfolds the LLM from your secrets. A Claude Code plugin for secret. 6 ★ 74 
raxitlabs raxITlabs/agent-security-review raxIT security tooling for AI agents 6 ★ 75 
security-compliance-marketplace diegocconsolini/ClaudeSkillCollection Professional security, privacy, and compliance plugins for Claude Code. Features Plugin Security Checker with 91 specialized dete… 6 ★ 76 
security-sweep-marketplace Onome-AJ/security-sweep-plugin Free Claude Code plugin that scans your project for leaked API keys, security holes, and common mistakes before you ship. No secu… 6 ★ 77 
servicenow-mcp-ai IvanBBaev/servicenow-mcp-ai ServiceNow MCP server — 67 tools over the full REST surface, with plan-and-apply write safety, capability preflight and an ACL se… 6 ★ 78 
smooth SmooAI/smooth Smooth (th) — a security-first AI agent orchestration platform and CLI. 6 ★ 79 
ai-development-framework joaoariedi/ai-assisted-development-framework A systematic Claude Code configuration for spec-driven development (SDD) with quality gates, custom agents, automated hooks, secu… 5 ★ 80 
dmaynor-skills-marketplace dmaynor/dmaynor-skills-marketplace Security skills marketplace 5 ★ 81 
fortinet-plugins lacework/forticnapp-llm-plugins Claude code plugin for Code Security 5 ★ 82 
imagine Mineru98/imagine ChatGPT Plus/Pro 구독만으로 Claude Code 안에서 이미지를 생성·편집하세요. 별도의 OpenAI API 키 없이, Codex OAuth 프록시로 gpt-image 모델을 호출하는 18개 스킬 · 11개 에이전트… 5 ★ 83 
mssql-performance-skills vanterx/mssql-performance-skills SQL Server performance tuning skills for Claude Code — 833 checks across 26 skills covering T-SQL static analysis, execution plan… 5 ★ 84 
pre-launch-audit-skill bzsasson/pre-launch-audit-skill Claude SEO skill: comprehensive pre-launch website audit covering AI accessibility, technical SEO, on-page SEO, security and perf… 5 ★ 85 
threat-model alpha-omega-security/threat-model Agent skill for producing threat models for open-source projects 5 ★ 86 
a8cteam51-claude-code-plugins a8cteam51/claude-code-plugins Claude Code plugins by Automattic's Special Projects team for WordPress development, security, and partner work. 3 ★ 87 
agent-bar strataga/agent-bar A multi-service status bar for Claude Code — context, rate limits, costs, and OAuth status 3 ★ 88 
air-gapped-marketplace air-gapped/skills Claude Code plugin marketplace — 58 installable reference skills across vLLM/SGLang inference, Kubernetes & Harvester, GPU host b… 3 ★ 89 
cybersorted-pro cyber-sorted/skills-pro Professional security and enterprise architecture advisory skills by CyberSorted 3 ★ 90 
danielbodart-plugins danielbodart/claude-code-plugins Security-focused Claude Code plugins for Linux desktop and web access control 3 ★ 91 
gaia-marketplace metraton/gaia Security-first multi-agent orchestration for Claude Code. Distributes the Gaia plugin: specialized agents across the development… 3 ★ 92 
harness-sast-and-sca-plugins ShiftLeftSecurity/claude-plugins Harness SAST and SCA plugins for Claude Code 3 ★ 93 
ios-binary-size-reduction ehmo/ios-binary-size-reduction-skill Staged, security-aware iOS binary size reduction guidance for production Swift/Xcode projects. 3 ★ 94 
mcp-sentinel jakeefr/mcp-sentinel Runtime security scanner for MCP tool poisoning. Native Claude Code plugin. 3 ★ 95 
usap jaskaranhundal/usap-skills Open-source AI cybersecurity agent skills for SOC, incident response, threat hunting, red team, blue team, and DevSecOps. 79 skil… 3 ★ 96 
agentkeeper rad-security/claude-code-plugin AgentKeeper security, compliance, and threat detection for AI coding agents. By RAD Security. 2 ★ 97 
cc-rhuss-marketplace rhuss/cc-rhuss-marketplace Custom Claude Code plugins for security, development, and automation workflows 2 ★ 98 
Claude for CA eurth/claude-for-ca Claude Code plugins for Indian Chartered Accountant firms — GST compliance, income tax, TDS/TCS, audit, MCA/secretarial, transfer… 2 ★ 99 
claude-security-marketplace robgil/claude-security-marketplace Claude Code plugin marketplace by robgil. 2 ★ 100 
dotnet-analyzer CartapenaBark/DotNetAnalyzer 93 MCP tools for .NET code analysis, refactoring, security scanning & architecture checking — via Roslyn + Claude Code Plugin 2 ★
ecc affaan-m/ECC The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude… 232k ★ 2 trailofbits trailofbits/skills Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 6.2k ★ 3 autoresearch uditgoenka/autoresearch Claude Autoresearch — autonomous goal-directed iteration for Claude Code. 14 commands: iterate, plan, debug, fix, security, ship,… 5.4k ★ 4 elementalsouls elementalsouls/Claude-BugHunter A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patter… 3k ★ 5 shiro-attack2 SummerSec/ShiroAttack2 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 利用工具 — 密钥爆破、Gadget 链探测、命令执行、内存马注入、Key 修改。 2.6k ★ 6 tanweai-security tanweai/wooyun-legacy wooyun-legacy skill for claude code 1.7k ★ 7 pm-claude-skills mohitagw15856/pm-claude-skills PM stands for Professional, not just Product Management. 515 Claude Skills + 4 agent templates across 74 bundles covering 31 prof… 1.2k ★ 8 clawsec prompt-security/clawsec A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') wi… 1.1k ★ 9 grc-skills Sushegaad/Claude-Skills-Governance-Risk-and-Compliance Claude Code skills for Governance, Risk & Compliance — ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecuri… 773 ★ 10 ghost-security ghostsecurity/skills Ghost Security's collection of AppSec skills for AI coding agents 399 ★ 11 ai-design-components ancoleman/ai-design-components Comprehensive full-stack development skills for AI-assisted development covering UI/UX, backend, DevOps, infrastructure, security… 388 ★ 12 aidevops marcusquinn/aidevops Vibe-Coding is easy. DevOps is hard. OpenCode & Git token-efficient AI agent automation for your app, business, and personal deve… 343 ★ 13 ksafe ioannisa/KSafe Agent skills for the KSafe Kotlin Multiplatform encrypted persistence library 314 ★ 14 claude-sync tawanorg/claude-sync Sync Claude Code sessions across devices using Cloudflare R2 with end-to-end encryption 227 ★ 15 cybersecurity-skills Masriyan/Claude-Code-CyberSecurity-Skill A comprehensive collection of 15 Claude Code Skills for cybersecurity professionals ,covering offensive security, defensive opera… 194 ★ 16 agent-sec-ops-kit-skills AgentSecOps/SecOpsAgentKit Security operations toolkit for AI coding agents. Give Claude Code 25+ skills to catch vulnerabilities, scan containers, detect s… 179 ★ 17 superpowers-symfony MakFly/superpowers-symfony Claude Code plugin for Symfony 7.4 LTS & 8.x — 44 skills, 7 AI subagents & 13 commands for API Platform v4, Doctrine ORM 3, TDD (… 179 ★ 18 x-twitter-scraper Xquik-dev/x-twitter-scraper Xquik agent Skill for REST, OAuth-first MCP, webhooks, exports, tweet search, follower data, monitoring, and confirmation-gated p… 162 ★ 19 01coder-agent-skills sugarforever/01coder-agent-skills Skills for creators and developers — content creation, publishing, analytics, and security scanning 125 ★ 20 agent-security-playbook OWASP/secure-agent-playbook OWASP Secure Agent Playbook — security skills for code analysis and AI/agent security 124 ★ 21 quillshield-security-skills quillai-network/quillshield_skills Structured skills for smart contract security audits. Infers state invariants, detects semantic guard gaps, models flash loan + o… 115 ★ 22 fort djadmin/fort Audit and fix your Mac's security in one command. No agent, no signup, open source. 72 ★ 23 shipyard lgbarn/shipyard Ship software systematically: project lifecycle, TDD, parallel agents, code review, security auditing, and infrastructure validat… 66 ★ 24 equilateral-agents Equilateral-AI/equilateral-agents-open-core EquilateralAgents - 22 self-learning AI agents with community standards contribution. Features agent memory, pattern recognition,… 59 ★ 25 califio califio/skills Claude Code plugins and Codex skills from Calif.io for AI-assisted security research and code auditing 58 ★ 26 don-cheli doncheli/don-cheli-sdd Don Cheli — SDD Framework. The most comprehensive Specification-Driven Development framework for AI agents. 88+ commands, 51 skil… 56 ★ 27 netresearch-claude-code-marketplace netresearch/claude-code-marketplace Curated Agentic Skills for AI coding agents — TYPO3, PHP, Go, Docker, Jira, security, and more. Platform-agnostic skills followin… 46 ★ 28 orcasecurity orcasecurity/orca-skills Skills and plugins to accelerate security workflows with the Orca Cloud Platform 46 ★ 29 armoriq armoriq/armorClaude Intent-based security plugin for Claude Code - registers a plan per prompt and enforces policy on every tool call via hooks. 44 ★ 30 prodsec-skills RedHatProductSecurity/prodsec-skills Security skills for AI coding assistants and agentic systems 43 ★ 31 enterprise-harness-engineering addxai/enterprise-harness-engineering Enterprise-grade AI Agent Skills for software development, DevOps, SRE, security, and product teams. Compatible with Claude Code,… 41 ★ 32 kernel-vuln-analyzer winmin/kernel-vuln-analyzer Claude Code skill for Linux kernel vulnerability analysis — from crash log triage to patch verification 39 ★ 33 sentinelx-prime-dev alicankiraz1/SentinelXPrime Development marketplace for the SentinelXPrime security skill suite 37 ★ 34 glincker-marketplace glincker/claude-code-marketplace Community-driven Claude Code marketplace with specialized AI agents for the full SDLC. Features multi-agent coordination, workflo… 34 ★ 35 alien-agent-id alien-id/agent-id A portable cryptographic identity, encrypted credential vault, and logged-in browser for AI agents. The agent uses your API keys… 33 ★ 36 northflank northflank/skills An agent skill for deploying, operating, and automating workloads on Northflank. Includes guidance and references for services, j… 31 ★ 37 skill-fetch girofu/skill-fetch Multi-registry skill discovery and installation for AI coding agents — search 9 sources, score, paginate, and install agent skill… 29 ★ 38 swift-security-skill ivan-magda/swift-security-skill AI agent skill for secure credential storage & cryptography on Apple platforms - Keychain Services, biometric auth, CryptoKit, an… 28 ★ 39 autoresearch wjgoarxiv/autoresearch-skill Autonomous research loops for any domain. 10 commands: core loop, plan, debug, fix, predict, security, scenario, reason, ship. 26 ★ 40 llm-autonomous-agent-plugin-for-claude bejranonda/LLM-Autonomous-Agent-Plugin-for-Claude Autonomous self-learning agent plugin for Claude Code — 36 specialized subagents in a 4-tier architecture (analysis, planning, ex… 26 ★ 41 rl-protect-skills reversinglabs/rl-protect-skills Claude Code skills for Spectra Assure Community. Scan open source dependencies for malware, vulnerabilities, and policy violation… 26 ★ 42 infisical-ai-skills Infisical/ai-skills AI skills and MCP connection for Infisical -- Stop your AI from hallucinating about Infisical secrets management. 25 ★ 43 thumbgate-marketplace IgorGanapolsky/ThumbGate ThumbGate Pre-Action Checks derive rules from repeated failures, flag risky tool calls, hard-block detected secret leaks, and blo… 24 ★ 44 github-autopilot Shweta-Mishra-ai/github-autopilot GitHub Autopilot — AI repo assistant. Analyze PRs, fix issues, scan secrets from your IDE. 22 ★ 45 soundcheck thejefflarson/soundcheck Simple security reviews for AI agents 20 ★ 46 frontend-craft bovinphang/frontend-craft Shared Claude Code plugin for frontend teams — agents, skills, hooks, and project templates for code review, design-to-code, arch… 19 ★ 47 sentinel-ai-safety MaxwellCalkin/sentinel-ai Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscati… 19 ★ 48 vibe-ship sudais-khalid/vibe-ship Marketplace for the vibe-ship plugin: generates and audits production-ready deployment setups (Docker, CI/CD, security, scalabili… 18 ★ 49 dev-tools siva01c/claude-plugins Claude Code plugin marketplace: Drupal development, DDEV, Docker, CI/CD, git workflows, and OWASP ASVS security 17 ★ 50 insightflo insightflo/claude-impl-tools A Claude Code skills and project-team toolkit repository for standardized workflows, governance automation, and quality/securi… 17 ★ 51 claudesec Twodragon0/claudesec Security scanner, ISMS dashboard, and asset management for AI-assisted development 16 ★ 52 fortify fortify/skills AI agent skills for OpenText Fortify — SAST/DAST/SCA scanning, vulnerability triage, CI/CD integration, and FCLI workflows. Works… 15 ★ 53 skills schwepps/skills Claude Code skills: SEO audits, AI search optimization, music creation, smart contract security, LinkedIn personal branding, deve… 15 ★ 54 product-forge-marketplace jpoutrin/product-forge Comprehensive product development toolkit with PRD management, technical specialists, and security expertise 14 ★ 55 claude-skills-collection khalilbenaz/claude-skills-collection 349 professional skills for Claude Code — dev, cloud, security, AI/ML, business, career, and more 12 ★ 56 descope-skills descope/skills Official collection of Descope authentication skills for AI coding agents 12 ★ 57 dotnet-nuget-proxy logiclabs/dotnet-nuget-proxy-skill Claude Code skill plugin for fixing .NET NuGet proxy authentication issues 12 ★ 58 florianbuetow-plugins florianbuetow/claude-code A collection of Claude Code plugins for software engineering workflows: SOLID principles analysis, system-level architecture prin… 12 ★ 59 superpowers-ecc aman-2709/superpowers-ecc Disciplined workflow skills, security review, learning system, and cross-platform tooling 11 ★ 60 docvet Alberto-Codes/docvet Comprehensive docstring quality vetting for Python projects 9 ★ 61 clawjournal rayward-external/clawjournal ClawJournal — review, curate, and share your coding agent conversation traces. 100% local. Scans sessions from Claude Code, Codex… 8 ★ 62 keeper-security Keeper-Security/keeper-agent-kit AI Agent skills and plugin marketplace for Keeper Secrets Manager CLI and Commander 8 ★ 63 minhthang-plugins MinhThang1009/dotclaude A curated collection of Claude Code plugins for development workflows, code review, security, and productivity 8 ★ 64 threat-modeling-toolkit josemlopez/threat-modeling-toolkit AI-powered threat modeling toolkit for Claude Code - STRIDE/PASTA framework support, compliance mapping, and security verification 8 ★ 65 vulnetix-plugins Vulnetix/pix-ai-coding-assistant Vulnerability intelligence for Claude Code — scans dependencies on commit, searches packages, analyzes exploits, and proposes fix… 8 ★ 66 attach-dev attach-dev/attach-guard Supply chain security plugin for Claude Code. Intercepts package installs across npm, pip, Go, and Cargo — blocks compromised pac… 7 ★ 67 eyesecurity eyesecurity/skills EU compliance enforcement for AI agents. Org-profile-driven guardrails for NIS2, GDPR & ISO 27001 — blocks secrets, flags critica… 7 ★ 68 Linear-Agent-Skills choam2426/Linear-CLI Agent-optimized Linear CLI for Claude Code, Cursor, Gemini CLI, and any AI coding agent — no OAuth, no MCP, no dependencies. 7 ★ 69 msapps-plugins MSApps-Mobile/claude-plugins 29 free, open-source plugins for Claude Code & Cowork — Google Drive, WhatsApp, YouTube, WordPress, Apollo & more. Built on the S… 7 ★ 70 skill-threat-modeling cga22099/skill-threat-modeling 🔍 Transform source code into actionable security insights with the Code-First Automated Threat Modeling Toolkit for deep risk an… 7 ★ 71 automagik-workit automagik-dev/workit Fork of gogcli with headless OAuth and Drive sync for AI agents 6 ★ 72 awesome-claude-security jassics/awesome-claude-security Claude code skills, agents, memory, profiles to accomplish cybersecurity tasks, projects, jobs with ease. claude-code, claude-pl… 6 ★ 73 blindfold thesaadmirza/blindfold Blindfolds the LLM from your secrets. A Claude Code plugin for secret. 6 ★ 74 raxitlabs raxITlabs/agent-security-review raxIT security tooling for AI agents 6 ★ 75 security-compliance-marketplace diegocconsolini/ClaudeSkillCollection Professional security, privacy, and compliance plugins for Claude Code. Features Plugin Security Checker with 91 specialized dete… 6 ★ 76 security-sweep-marketplace Onome-AJ/security-sweep-plugin Free Claude Code plugin that scans your project for leaked API keys, security holes, and common mistakes before you ship. No secu… 6 ★ 77 servicenow-mcp-ai IvanBBaev/servicenow-mcp-ai ServiceNow MCP server — 67 tools over the full REST surface, with plan-and-apply write safety, capability preflight and an ACL se… 6 ★ 78 smooth SmooAI/smooth Smooth (th) — a security-first AI agent orchestration platform and CLI. 6 ★ 79 ai-development-framework joaoariedi/ai-assisted-development-framework A systematic Claude Code configuration for spec-driven development (SDD) with quality gates, custom agents, automated hooks, secu… 5 ★ 80 dmaynor-skills-marketplace dmaynor/dmaynor-skills-marketplace Security skills marketplace 5 ★ 81 fortinet-plugins lacework/forticnapp-llm-plugins Claude code plugin for Code Security 5 ★ 82 imagine Mineru98/imagine ChatGPT Plus/Pro 구독만으로 Claude Code 안에서 이미지를 생성·편집하세요. 별도의 OpenAI API 키 없이, Codex OAuth 프록시로 gpt-image 모델을 호출하는 18개 스킬 · 11개 에이전트… 5 ★ 83 mssql-performance-skills vanterx/mssql-performance-skills SQL Server performance tuning skills for Claude Code — 833 checks across 26 skills covering T-SQL static analysis, execution plan… 5 ★ 84 pre-launch-audit-skill bzsasson/pre-launch-audit-skill Claude SEO skill: comprehensive pre-launch website audit covering AI accessibility, technical SEO, on-page SEO, security and perf… 5 ★ 85 threat-model alpha-omega-security/threat-model Agent skill for producing threat models for open-source projects 5 ★ 86 a8cteam51-claude-code-plugins a8cteam51/claude-code-plugins Claude Code plugins by Automattic's Special Projects team for WordPress development, security, and partner work. 3 ★ 87 agent-bar strataga/agent-bar A multi-service status bar for Claude Code — context, rate limits, costs, and OAuth status 3 ★ 88 air-gapped-marketplace air-gapped/skills Claude Code plugin marketplace — 58 installable reference skills across vLLM/SGLang inference, Kubernetes & Harvester, GPU host b… 3 ★ 89 cybersorted-pro cyber-sorted/skills-pro Professional security and enterprise architecture advisory skills by CyberSorted 3 ★ 90 danielbodart-plugins danielbodart/claude-code-plugins Security-focused Claude Code plugins for Linux desktop and web access control 3 ★ 91 gaia-marketplace metraton/gaia Security-first multi-agent orchestration for Claude Code. Distributes the Gaia plugin: specialized agents across the development… 3 ★ 92 harness-sast-and-sca-plugins ShiftLeftSecurity/claude-plugins Harness SAST and SCA plugins for Claude Code 3 ★ 93 ios-binary-size-reduction ehmo/ios-binary-size-reduction-skill Staged, security-aware iOS binary size reduction guidance for production Swift/Xcode projects. 3 ★ 94 mcp-sentinel jakeefr/mcp-sentinel Runtime security scanner for MCP tool poisoning. Native Claude Code plugin. 3 ★ 95 usap jaskaranhundal/usap-skills Open-source AI cybersecurity agent skills for SOC, incident response, threat hunting, red team, blue team, and DevSecOps. 79 skil… 3 ★ 96 agentkeeper rad-security/claude-code-plugin AgentKeeper security, compliance, and threat detection for AI coding agents. By RAD Security. 2 ★ 97 cc-rhuss-marketplace rhuss/cc-rhuss-marketplace Custom Claude Code plugins for security, development, and automation workflows 2 ★ 98 Claude for CA eurth/claude-for-ca Claude Code plugins for Indian Chartered Accountant firms — GST compliance, income tax, TDS/TCS, audit, MCA/secretarial, transfer… 2 ★ 99 claude-security-marketplace robgil/claude-security-marketplace Claude Code plugin marketplace by robgil. 2 ★ 100 dotnet-analyzer CartapenaBark/DotNetAnalyzer 93 MCP tools for .NET code analysis, refactoring, security scanning & architecture checking — via Roslyn + Claude Code Plugin 2 ★ Showing the top 100 of 212 — browse and filter all claude code plugins.
The best new security plugins, weekly
One email every week with the tools worth your time — plus Agentic Toolbelt: 100 Worth Stealing free when you join.
Frequently asked questions
What are the best security plugins for coding agents?
Ranked by GitHub stars, the current top security plugins are: ecc (232k ★), trailofbits (6.2k ★), autoresearch (5.4k ★), elementalsouls (3k ★), shiro-attack2 (2.6k ★).
How do I install a security plugin?
In Claude Code, add the marketplace with `/plugin marketplace add <owner>/<repo>`, then install with `/plugin install <name>`. Each plugin page shows its exact commands.
How many security plugins are listed here?
212 security plugins are currently tracked, with metrics (stars, downloads, last-update dates) sourced from GitHub and package registries and refreshed continuously.