Security: skills, plugins, subagents, slash commands and mcp servers

env-secrets-manager Alireza Rezvani skill This skill audits environment variables and scans repositories for likely secret leaks. Use it before config changes, during rotation planning, or in incident triage. Claude Code 667installs azure-iac-generator official github subagent Generates Bicep, Terraform, ARM, and Pulumi infrastructure templates with format-specific validation. Verifies API schemas via MCP servers before outputting code. GitHub Copilot 188installs payment-integration VoltAgent Community subagent A Claude Code subagent for integrating payment gateways, subscription lifecycles, and PCI DSS compliance into your codebase. Claude Code 463installs soc2-compliance Alireza Rezvani skill Guides SaaS teams through SOC 2 Type I and Type II preparation. Helps map Trust Service Criteria, build control matrices, and organize audit evidence. Claude Code 658installs database-administrator VoltAgent Community subagent A subagent for database performance work, replication, backups, recovery, and production infrastructure. Use it when database reliability needs a structured review. Claude Code 452installs cloud-security Alireza Rezvani skill Flags exploitable misconfigurations across AWS, Azure and GCP: IAM privilege escalation paths, public buckets, open security group ports. Useful before an audit or when reviewing IaC. Claude Code 643installs kubernetes-specialist VoltAgent Community subagent This subagent designs, configures, deploys, and troubleshoots Kubernetes clusters and workloads. Use it when cluster operations, security, or scaling need focused review. Claude Code 450installs threat-detection Alireza Rezvani skill Supports proactive threat hunting with hypotheses, IOC sweeps and telemetry anomaly checks. Use it to investigate activity that automated alerts may miss. Claude Code 637installs google-workspace-cli Alireza Rezvani skill Use this skill to manage Google Workspace through the gws CLI, from sending Gmail messages to listing Drive files. It fits workflows you want to run from Claude Code. Claude Code 636installs incident-response Alireza Rezvani skill Triage and classify active security incidents in Claude Code. The skill scores events from SEV1 to SEV4, filters false positives, and routes escalations. Claude Code 634installs stackhawk-security-onboarding official github subagent This subagent checks whether a repository has an application or API worth testing, then prepares StackHawk configuration and a GitHub Actions workflow. Use it to set up security scans for an app. GitHub Copilot 179installs ciso-advisor Alireza Rezvani skill Turns security risks into financial estimates and helps plan compliance work. Use it to shape a security program, assess vendors, or coordinate incident response. Claude Code 623installs payment-integration Seth Hobson subagent This subagent integrates Stripe, PayPal, and other payment processors, covering subscriptions, checkout, and webhooks. Use it for billing work. Claude Code CX Codex Cursor 463installs terraform-patterns Alireza Rezvani skill Analyzes Terraform code for anti-patterns and scaffolds structured modules. Useful when hardening state backends or fixing security misconfigurations. Claude Code 617installs apigee-agent-gateway-governance official google skill This skill builds an Apigee proxy that inspects LLM traffic through Agent Gateway. Use it to meter model tokens, extract caller identity, or screen prompts. Claude Code Gemini CLI CX Codex 145installs azure-cloud-architect Alireza Rezvani skill Designs Azure architectures, generates Bicep templates, and analyzes cloud costs. Useful when planning migrations or setting up Azure DevOps and GitHub Actions pipelines. Claude Code 607installs compliance-auditor VoltAgent Community subagent Reviews controls, policies, and data flows against regulatory requirements, then helps identify gaps and prepare audit evidence. Use it to assess an existing compliance setup. Claude Code 421installs security-hardening Seth Hobson command This command runs a staged security review: vulnerability scanning, threat modeling, and architecture checks. Use it when a project needs a documented hardening pass. Claude Code CX Codex Cursor 437installs helm-chart-builder Alireza Rezvani skill Scaffolds production-ready Helm charts, analyzes templates for anti-patterns, and audits Kubernetes manifest security. Useful when packaging apps for clusters. Claude Code 581installs security-guidance Alireza Rezvani skill Catches 12 common security flaws before Claude Code edits or writes files. Acts as a safety net when handling authentication, payment flows, or untrusted input. Claude Code 551installs electron-pro VoltAgent Community subagent Subagent for building desktop software on Electron 27+. Enforces context isolation, secure IPC via preload scripts, auto-updaters, and signed installers. Claude Code 376installs blockchain-developer VoltAgent Community subagent This subagent helps build smart contracts, DApps, and blockchain protocols with attention to security, gas costs, and Web3 integration. Use it for Solidity and EVM work. Claude Code 375installs dependency-manager VoltAgent Community subagent Audits dependencies for vulnerabilities and version conflicts, then looks for duplicate or unused packages. It also supports update automation and bundle-size work. Claude Code 356installs blockchain-developer Seth Hobson subagent Helps build and review smart contracts, DeFi protocols, and Web3 apps. Use it for blockchain infrastructure and integrations across several ecosystems. Claude Code CX Codex Cursor 375installs ship-gate Rajaraman Arumugam skill Scans your codebase across 8 pre-production categories and blocks deployment when critical security or code flaws are found. Claude Code 475installs terraform-engineer VoltAgent Community subagent Designs, refactors, and scales Terraform infrastructure. It handles multi-cloud setups, module architecture, remote state management, and security compliance. Claude Code 328installs agent-skill-stack official github skill Finds a small compatible set of AI Agent Skills for a multi-step goal. Use it to audit installed Skills or work out what a project still needs. GitHub Copilot 128installs ciso-review Alireza Rezvani skill A Claude Code slash command that runs a plan through six CISO questions and ends with a verdict: ship it, close the gaps first, or block. Claude Code 390installs iso42001-specialist Alireza Rezvani skill Reviews AI management system gaps, maps risks to Annex A controls, and drafts an internal audit plan. Use it when preparing for ISO 42001 certification. Claude Code 385installs incident-responder VoltAgent Community subagent This subagent handles active service outages and security breaches. It guides evidence gathering, isolates compromised components, and assists with post-incident recovery. Claude Code 265installs data-breach-blast-radius official github skill This skill maps sensitive data, traces its flows, and estimates the impact of a breach. Use it before a security review or for systems handling user, health, or financial data. GitHub Copilot 106installs gc-review Alireza Rezvani skill Reviews contracts, term sheets, and regulatory risks before signing. Helps identify high-risk clauses and prepare questions for outside counsel. Claude Code 363installs arduino-azure-iot-edge-integration official github skill Guides Arduino-to-Azure IoT Hub and IoT Edge design, from telemetry to device commands. Use it when a project needs an edge gateway or must handle unreliable links. GitHub Copilot 100installs slack-expert VoltAgent Community subagent This subagent builds Slack apps, connects Slack APIs, and reviews bot code for security. Use it when a project needs a Slack integration or audit. Claude Code 246installs azure-infra-engineer VoltAgent Community subagent Designs and manages Azure infrastructure across networking, Entra ID, PowerShell, and Bicep. Use it to plan deployments, review access, or automate operations. Claude Code 245installs iot-engineer VoltAgent Community subagent This subagent helps plan IoT systems from device connectivity and edge processing to cloud services. Use it when a project has varied connectivity needs or substantial data flows. Claude Code 238installs m365-admin VoltAgent Community subagent Automates Microsoft 365 administration tasks, including Exchange mailboxes, Teams, SharePoint sites, and license management via Graph API. Built for M365 engineers. Claude Code 229installs ad-security-reviewer VoltAgent Community subagent Audits Active Directory security, detects privilege escalation paths, and generates remediation scripts. Use it to inspect GPO rules and domain trusts. Claude Code 212installs aws-well-architected-review official github skill Audits repository IaC files against the 6 AWS Well-Architected Framework pillars and opens GitHub issues with remediation snippets. GitHub Copilot 84installs powershell-5.1-expert VoltAgent Community subagent A subagent for PowerShell 5.1 automation on Windows, covering Active Directory, DNS, DHCP, and GPO tasks in legacy .NET Framework environments. Claude Code 196installs