NeVibeCode · 29 items
Plugins for Security
Plugins for Security: what each one does, an install command and example prompts.
security-guidance
official plugin Three layers of review for code Claude writes: instant regex warnings, an LLM pass over the diff, and an agentic commit reviewer.
★ 44,635repo stars
mcp-tunnels
official plugin Connects Claude to an MCP server inside your private network through an Anthropic tunnel, with no inbound ports or public exposure.
★ 44,635repo stars
hookify
official plugin Generates custom hooks for Claude Code using lightweight Markdown files. It blocks dangerous terminal commands and catches unwanted code changes automatically.
★ 44,635repo stars
code-modernization
official plugin Walks a legacy codebase through assessment, a plan you approve, the rebuild, and proof that the new code behaves like the old.
★ 44,635repo stars
claude-security
official plugin Scans your code for vulnerabilities inside the Claude session, challenges every finding, and turns confirmed ones into patches.
★ 44,635repo stars
google-cloud-developer
official plugin This plugin guides agents through Google Cloud setup, credential choices and gcloud command checks. Its MCP server connects agents to Google’s official developer documentation.
CX Codex
★ 21,578repo stars
software-engineering-team
official plugin Seven agents cover tasks from UX research and architecture reviews to security and DevOps. Pick a specialist for the work at hand.
★ 40,418repo stars
security-best-practices
official plugin Audit AI prompts for safety vulnerabilities, bias, and performance inside GitHub Copilot. Helps refine prompts using structured testing methods.
★ 40,418repo stars
partners
official plugin Collection of partner agents for GitHub Copilot covering Arm migration, Neon database branching, Terraform workflows, and incident triage.
★ 40,418repo stars
github-security
official plugin Adds an interactive Security canvas to GitHub Copilot App for investigating GHAS code scanning alerts and local security findings.
★ 40,418repo stars
protect-mcp plugin Gates every tool call through a Cedar policy and issues an Ed25519-signed receipt. Useful when an agent needs limits on files and shell commands.
CX Codex
★ 41,729repo stars
hr-legal-compliance plugin Generates HR policies, employment contracts, and regulatory compliance templates for GDPR, SOC2, and HIPAA. Helpful when preparing internal corporate documents.
CX Codex
★ 41,729repo stars
frontend-mobile-security plugin A Claude plugin that covers XSS prevention, CSRF protection, Content Security Policy setup, and secure storage patterns for mobile apps.
CX Codex
★ 41,729repo stars
security-compliance plugin Check projects against SOC2, HIPAA, and GDPR, scan for secrets, and work with compliance checklists and regulatory documentation.
CX Codex
★ 41,729repo stars
security-scanning plugin A Claude plugin that checks your code for vulnerabilities: SAST, dependency scanning, container checks and OWASP Top 10 compliance.
CX Codex
★ 41,729repo stars
comprehensive-review plugin A Claude plugin that reviews your code from three angles at once: architecture, security and development practices. Useful before merging a large branch.
CX Codex
★ 41,729repo stars
kubernetes-operations plugin This plugin covers Kubernetes manifests, networking, security policies, observability, GitOps workflows, and auto-scaling for infrastructure tasks.
CX Codex
★ 41,729repo stars
codex-security
official plugin An Anthropic plugin that adds security workflows to Claude: scanning, analysis and incident investigation inside the chat.
CX Codex GP ChatGPT
★ 7,596repo stars
compliance-team-eu-ai-act plugin Three stdlib scripts classify an AI system under the EU AI Act, plan the conformity route and build an obligation matrix for your organizational role.
★ 28,733repo stars
compliance-os plugin A meta-orchestrator for multi-framework compliance: picks the frameworks that apply, maps control overlap, simulates audits and builds one evidence pool.
★ 28,733repo stars
nah plugin A local guard in the Claude hook path: it reads tool calls before they run and blocks the ones it can prove are disasters.
★ 491repo stars
claude-code-organizer plugin A local web dashboard that shows what your Claude actually loads: memories, skills, subagents, hooks, MCP servers and configs. Useful when agent behaviour comes out of nowhere.
★ 384repo stars
aws-agents-for-devsecops plugin A Claude plugin that wires the editor to AWS DevOps Agent and AWS Security Agent for incident work, release checks, code scans and pentests.
★ 3,282repo stars
superpowers-optimized plugin A fork of obra/superpowers that picks one of three workflow tiers on its own, adds safety hooks and keeps memory across sessions. Built for long projects in Claude.
★ 142repo stars
agentic-security plugin A Claude plugin that hunts for vulnerabilities, tests whether each finding is actually exploitable, and repairs it through a verification gate. Useful when a model wrote the code and you need to know what is unsafe.
★ 118repo stars
malchela plugin A Rust toolkit for triaging suspicious files: hashes, strings, YARA rules, VirusTotal and MalwareBazaar lookups. Wired into Claude as an MCP server.
★ 117repo stars
project-boundary plugin Destructive commands pass inside your project directory and get blocked outside it. Meant for runs with --dangerously-skip-permissions.
★ 90repo stars
subtext plugin The plugin feeds recorded app sessions to your agent, so it can trace what a real user did and where things broke.
★ 79repo stars
github-copilot-modernization plugin A multi-agent plugin for GitHub Copilot CLI that upgrades Java and .NET apps, moves them to Azure, patches CVEs and splits monoliths into services.
★ 53repo stars
