Help us improve
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
By hrconsultnj
Runs comprehensive security scans on codebases and infrastructure: CVE dependency audits, Semgrep static analysis, supply chain risk inspection of JS/Python/Rust/Go packages, HTTP security header analysis, and OWASP penetration testing. Prioritizes findings by exposure risk and writes actionable remediation tasks.
npx claudepluginhub hrconsultnj/claude-plugins --plugin sentinelAssess project security surface — detect stack, package managers, security tooling, and integrations. Generate .claude/sentinel.json config. Run once per project.
Focused dependency CVE audit — reports vulnerabilities with version info and safe upgrade commands.
HTTP security header analysis — context-aware grading with exploitable-risk focus, not checkbox counting.
Analyze an installed package's source code for suspicious behavior patterns (eval, network calls, env access, obfuscation).
Exposure-aware security scan — Semgrep static analysis, dependency audit, and Composure graph-based exposure prioritization. Writes prioritized findings to tasks-plans/tasks.md.
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Share bugs, ideas, or general feedback.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Open-source cybersecurity analysis agent. Scans any local project for vulnerabilities: code security (SAST), dependency CVEs (SCA), secret leaks, authentication/authorization flaws, cryptographic weaknesses, misconfigurations, supply chain risks, and CI/CD security. Covers all OWASP 2025 Top 10 and CWE Top 25 categories. Generates prioritized reports with remediation guidance. Invoke with /cyber-neo [path].
AI-powered security auditing with interactive skills, automated agents, web dependency scanning, and supply chain hardening for comprehensive vulnerability detection and reporting
Comprehensive vulnerability scanning for code, dependencies, and configurations with CVE detection
Security vulnerability detection and remediation: OWASP Top 10, SAST scanning, CVE research, dependency audit, secrets detection
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.
Implements automated security scanning for dependencies, code, and containers using tools like Trivy, Snyk, and npm audit. Use when setting up CI/CD security gates, conducting pre-deployment audits, or meeting compliance requirements.
CI/CD generation, deployment preflight, and Dockerfile validation with zero-downtime patterns.
Code quality enforcement, architecture skills, structural code graph, and impact-aware reviews.
Test framework detection, convention-aware test generation, and changed-file test execution.
Premium design patterns, UX research skills, and user journey mapping for modern web applications.
Uses power tools
Uses Bash, Write, or Edit tools
Uses power tools
Uses Bash, Write, or Edit tools
Share bugs, ideas, or general feedback.
Claude writes code fast. These plugins make sure it writes it right.
5 plugins · 33 skills · 17 automated hooks · 13 MCP tools · 8 indexed languages · One command setup
Full docs & getting started: composure-pro.com
AI coding agents are fast — but speed without guardrails creates expensive cleanup work. If you've used Claude Code on a real project, you've seen this:
as any, @ts-ignore, non-null assertions to silence errors instead of fixing typeseval(), SQL injection vectors slip through unnoticedYou can write better prompts. You can add more rules to CLAUDE.md. But the agent can still ignore all of it — instructions are suggestions, not enforcement.
Hooks are different. They run as shell scripts on every Read/Edit/Write — outside the LLM, at zero token cost. The agent literally cannot bypass them. That's how these plugins work.
All plugins, all skills, all hooks — free for personal use, education, and nonprofits.
| What | Count | Details |
|---|---|---|
| Plugins | 5 | Composure, Design Forge, Sentinel, Testbench, Shipyard |
| Skills | 33 | Architecture, blueprinting, security scanning, test generation, CI/CD, audits, integrations |
| Hooks | 17 | Code quality, secret detection, type safety, decomposition, graph updates |
| MCP tools | 13 | Graph queries, semantic search, reference search, dependency chains, audits, reports |
| Reference docs | 23 | Security patterns, testing patterns, deployment guides |
| Templates | 12 | Test files, GH Actions workflows, Dockerfiles |
| Hook enforcement | 7 languages | TypeScript, Python, Go, Rust, C++, Swift, Kotlin |
| Graph indexing | 8 languages | TypeScript, JavaScript, SQL, JSON, YAML, Markdown, ENV, Prisma |
| Graph node types | 13 | Functions, Classes, Types, Tables, Columns, RLS Policies, Indexes, Packages, Scripts, and more |
| Plugin | What it solves |
|---|---|
| Composure | Code quality enforcement — decomposition hooks, architecture skills, code review knowledge graph, severity-tracked task queue. The foundation that all other plugins build on. |
| Sentinel | Security scanning — SAST, secret detection on every write, dependency CVE audit, HTTP header analysis. Local-first, no cloud auth. |
| Testbench | Convention-aware test generation — reads your existing tests to match project style. Nudges when you edit untested files. |
| Shipyard | CI/CD generation and validation — GitHub Actions, GitLab CI, Bitbucket Pipelines. Dockerfile validation, dependency health, production readiness. |
| Composure Pro | 22 production architecture patterns + schema guard hook. Postgres RLS, tenant isolation, entity registry, auth model, type generation — battle-tested across 322+ migrations. Works with any Postgres host. |
| Design Forge | Premium web design patterns — 33 production components, canvas presets, animation recipes, 3D integration, accessibility-first. |
macOS / Linux:
curl -fsSL https://composure-pro.com/install.sh | sh
Windows (PowerShell):
irm https://composure-pro.com/install.ps1 | iex
Windows (Command Prompt):
curl -fsSL https://composure-pro.com/install.cmd -o %TEMP%\composure-install.cmd && %TEMP%\composure-install.cmd
Works on any OS with Claude Code installed:
# Add the marketplace
claude plugin marketplace add hrconsultnj/claude-plugins
# Install Composure
claude plugin install composure@my-claude-plugins
After installing, restart Claude Code and authenticate:
/composure:auth login