Claude Directory

All Security plugins

Best Claude Code plugins for ai & agent development on Security (August 2026)

29 curated Claude Code plugins that handle ai & agent development on Security projects. Install commands, configs, and copy-paste setup, refreshed August 2026.

29 items matching Security & AI & Agent Development.

42crunch Api Security Testing

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous…

securitytestingapiai

Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain

Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.

Your code review partner. CodeRabbit provides external validation using a specialized AI architecture and 40+ integrated static analyzers—offering a different perspective that catches bugs, security vulnerabilities, logic errors, and edge cases. Context-aware analysis via AST pa…

productivitysecurityai

Secure access to Miro boards. Enables AI to read board context, create diagrams, and generate code with enterprise-grade security.

designsecurityai

Enhance code quality and security through PagerDuty risk scoring and incident correlation. Score pre-commit diffs against historical incident data and surface deployment risk before you ship.

monitoringsecuritydeploymentai

Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster.

Vanta Mcp Plugin

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster.

Container Security Scanner

Scan containers for vulnerabilities using Trivy, Snyk, and other security tools

devopssecurityai

Cross Chain Bridge Monitor

Monitor cross-chain bridge activity, track transfers, analyze security, and detect bridge exploits

cryptosecurityai

Penetration Tester

25-skill pentest pack with engagement governance, network/code/dependency scans, OWASP Top 10 mapping, and exec-readable reporting. Heavy-hitter compliant; chain-of-custody attestable.

Comprehensive codebase cleanup across 11 quality dimensions — dead code, duplication, weak types, circular deps, defensive cruft, legacy code, AI slop, type consolidation, security, performance, and async patterns. Confidence scoring and build verification gates.

testingsecurityperformanceai

Security Pro Pack

Professional security tools for Claude Code: vulnerability scanning, compliance, cryptography audit, container & API security

packagessecurityapiai

Engineering Skills

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud archit…

developmentgoazuresecurity+2

Docker Development

Docker and container development — Dockerfile optimization, docker-compose orchestration, multi-stage builds, security hardening, and CI/CD container pipelines.

developmentdockersecurityai

AI Shipping Kit — for PMs and founders accountable for AI-built code. Document a vibe-coded app, audit it for intended-vs-implemented security gaps and performance issues, and produce a reviewer-ready shipping packet.

product-managementsecurityperformanceai

Security Scanning

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

Frontend Mobile Security

XSS prevention, CSRF protection, content security policies, mobile app security, and secure storage patterns

Block No Verify

PreToolUse hook that prevents AI agents from using --no-verify, --no-gpg-sign, and other bypass flags that skip git hooks

securityaiagent

Access Control Rbac

Role-based access control (RBAC) with permissions and policies. Use for admin dashboards, enterprise access, multi-tenant apps, fine-grained authorization, or encountering permission hierarchies, role inheritance, policy conflicts.

Claude Code Bash Patterns

Claude Code Bash tool patterns with hooks, automation, git workflows. Use for PreToolUse hooks, command chaining, CLI orchestration, custom commands, or encountering bash permissions, command failures, security guards, hook configurations.

toolingsecurityautomationai

Cloudflare Turnstile

Cloudflare Turnstile CAPTCHA-alternative bot protection. Use for forms, login security, API protection, or encountering CSP errors, token validation failures, error codes 100*/300*/600*.

cloudflaresecurityapiai

Defense In Depth Validation

Validate at every layer data passes through to make bugs impossible. Use when invalid data causes failures deep in execution, requiring validation at multiple system layers.

Dependency Upgrade

Secure dependency upgrades with supply chain protection, cooldowns, staged rollout, and Socket CLI integration. Use when upgrading deps, configuring security policies, or preventing supply chain attacks.

toolingsecurityai

Google Gemini CLI for second opinions, architectural advice, code reviews, security audits. Leverage 1M+ context for comprehensive codebase analysis via command-line tool.

aigosecurityrag

Multi Ai Consultant

Consult external AIs (Gemini 2.5 Pro, OpenAI Codex, Claude) for second opinions. Use for debugging failures, architectural decisions, security validation, or need fresh perspective with synthesis.

Security Headers Configuration

Configures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web applications, passing security audits, or implementing Content Security Policy.

Vulnerability Scanning

Implements automated security scanning for dependencies, code, and containers using tools like Trivy, Snyk, and npm audit. Use when setting up CI/CD security gates, conducting pre-deployment audits, or meeting compliance requirements.

securitydeploymentai

More plugins for ai & agent development

Browse all ai & agent development setups

Cross-reference with other workflows

Security for Code Review Security for Testing Security for Security Security for Git Workflows Security for Documentation Security for Debugging Security for Performance Security for Deployment & CI/CD Security for Databases Security for API Development Security for Refactoring Security for Frontend Development Security for Codebase Onboarding Security for Mobile Development Security for Observability & Monitoring Security for Refactoring Security for Frontend Development Security for Codebase Onboarding