Perform AI-powered security audits on codebases targeting OWASP Top 10 vulnerabilities and anti-patterns, scan deployed websites for outdated frontend libraries CVEs and security headers without source code, harden Node.js supply chains against attacks, and initialize project denial settings for multiple tech stacks.
Conducts comprehensive security audits in fresh context using the Security Audit skill. Use when context is saturated or for automated security reviews.
Scans websites for outdated dependencies, CVEs, and security misconfigurations. Use when analyzing deployed web applications or when context is saturated.
Comprehensive security audit to identify vulnerabilities, OWASP Top 10 issues, and security anti-patterns.
Initialize Claude Code security settings with intelligent file denial patterns based on your project's technology stack.
Scan a deployed website for outdated dependencies, known CVEs, and security misconfigurations.
Harden your project against npm supply chain attacks by configuring pnpm's minimumReleaseAge quarantine and frozen lockfile enforcement.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
AI-powered plugins that streamline your entire development workflow in Claude Code.
This Claude Code plugin marketplace provides plugins that extend Claude Code's capabilities, focusing on developer productivity and automation.
💡 Usage Note: All skills are invoked as slash commands without arguments (e.g.,
/accessibility-audit). Interactive skills will prompt you for any required information; non-interactive skills run directly on your codebase.
| Plugin | Description | Skills (Slash Commands) | Agents |
|---|---|---|---|
| ai-accessibility | AI-powered accessibility auditing with WCAG compliance | /accessibility-audit | accessibility-auditor |
| ai-ado | AI-powered Azure DevOps integration with MCP support | /ado-init, /ado-create-feature, /ado-create-story, /ado-create-task, /ado-log-story-work, /ado-timesheet-report | - |
| ai-git | AI-powered git automation and workflow streamlining | /git-init, /git-commit-push, /git-commit-push-pr | - |
| ai-learn | AI-powered Socratic learning mode for guided problem-solving | /learn, /learn-review | - |
| ai-performance | AI-powered performance optimization and bottleneck detection | /performance-audit | performance-auditor |
| ai-security | AI-powered security auditing with reproducible reports | /security-init, /security-audit, /security-scan-dependencies, /security-supply-chain | security-auditor, security-dependency-scanner |
| ai-statusline | AI-powered status line customization with progress bars | /statusline-wizard, /statusline-edit | - |
| ai-workflow | AI-powered development workflow automation | /workflow-plan-phases, /workflow-implement-phases, /workflow-preflight, /workflow-ship, /workflow-principles | - |
| ai-compliance | AI-powered license compliance auditing and attribution generation | /compliance-license-audit, /compliance-notice-generate | - |
| ai-knowledge | AI-powered knowledge base management with Obsidian compatibility | /kb-init, /kb-learn, /kb-add, /kb-query, /kb-import, /kb-ingest, /kb-harvest, /kb-discover, /kb-absorb, /kb-remove, /kb-list, /kb-search, /kb-prune, /kb-auto, /kb-organize, /kb-obsidian | - |
| ai-modernize | AI-powered codebase modernization assessment for technical debt | /modernize-audit, /modernize-scan | modernize-auditor |
| ai-writing | AI-powered writing quality tools for natural-sounding text | /writing-humanize | - |
📝 Note on Audit Plugins: The
ai-accessibility,ai-security, andai-performanceplugins are developer-focused analysis tools designed to identify issues during development. They perform static code analysis, withai-accessibilityandai-securityalso offering URL scanning capabilities (/accessibility-auditwith Playwright MCP and/security-scan-dependenciesrespectively). These plugins are meant to complement (not replace) runtime testing tools, professional services, and manual testing. Use these plugins to catch issues early in the development phase, then validate with specialized testing tools and services appropriate to your domain.
New to Claude Code? Claude Code is an AI-powered CLI tool that helps with software development tasks.
👉 Download and install Claude Code
/plugin marketplace add charlesjones-dev/claude-code-plugins-dev
# Install any plugin from this marketplace
/plugin install <plugin-name>@claude-code-plugins-dev
# Examples:
/plugin install ai-ado@claude-code-plugins-dev
/plugin install ai-git@claude-code-plugins-dev
/plugin install ai-security@claude-code-plugins-dev
AI-powered codebase modernization assessment - Interactive audit and quick scan skills to identify technical debt, anti-patterns, and quality issues from older AI-generated code
AI-powered Azure DevOps integration with skills - Intelligent work item management, configuration, and automation for Azure DevOps workflows with MCP integration
AI-powered performance optimization - Interactive performance audit skill and automated agent with comprehensive bottleneck detection and optimization
AI-powered development workflow automation - Phase-based planning, implementation orchestration, preflight code quality checks with security scanning, ship-it workflow, and development principles generator for CLAUDE.md
AI-powered software compliance auditing - Interactive license audit and NOTICE/ATTRIBUTION file generation for open-source dependency compliance
npx claudepluginhub charlesjones-dev/claude-code-plugins-dev --plugin ai-securitySecurity scanning, dependency CVE audits, and exposure-aware risk prioritization.
Open-source cybersecurity analysis agent. Scans any local project for vulnerabilities: code security (SAST), dependency CVEs (SCA), secret leaks, authentication/authorization flaws, cryptographic weaknesses, misconfigurations, supply chain risks, and CI/CD security. Covers all OWASP 2025 Top 10 and CWE Top 25 categories. Generates prioritized reports with remediation guidance. Invoke with /cyber-neo [path].
Check OWASP Top 10 compliance
Automated OWASP security checks — Web Top 10:2025, LLM Top 10:2025, API Security Top 10:2023
Implements automated security scanning for dependencies, code, and containers using tools like Trivy, Snyk, and npm audit. Use when setting up CI/CD security gates, conducting pre-deployment audits, or meeting compliance requirements.
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.