By hrconsultnj
Perform automated security audits on codebases: detect tech stacks and package managers, scan dependencies for CVEs with exact fix commands, analyze HTTP headers and package source code for supply chain risks across JS/Python/Rust/Go, run Semgrep static analysis, pentest OWASP Top 10 vulnerabilities, and generate prioritized reports with remediations.
npx claudepluginhub hrconsultnj/claude-plugins --plugin sentinelAssess project security surface — detect stack, package managers, security tooling, and integrations. Generate .claude/sentinel.json config. Run once per project.
Focused dependency CVE audit — reports vulnerabilities with version info and safe upgrade commands.
HTTP security header analysis — context-aware grading with exploitable-risk focus, not checkbox counting.
Analyze an installed package's source code for suspicious behavior patterns (eval, network calls, env access, obfuscation).
Exposure-aware security scan — Semgrep static analysis, dependency audit, and Composure graph-based exposure prioritization. Writes prioritized findings to tasks-plans/tasks.md.
Complete collection of battle-tested Claude Code configs from an Anthropic hackathon winner - agents, skills, hooks, rules, and legacy command shims evolved over 10+ months of intensive daily use
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Uses power tools
Uses Bash, Write, or Edit tools
Complete collection of battle-tested Claude Code configs agents, skills, hooks, rules, and legacy command shims evolved over 10+ months of intensive daily use
Complete collection of battle-tested Claude Code configs from an Anthropic hackathon winner - agents, skills, hooks, and rules evolved over 10+ months of intensive daily use
Complete collection of battle-tested Claude Code configs from an Anthropic hackathon winner - agents, skills, hooks, and rules evolved over 10+ months of intensive daily use
Efficient skill management system with progressive discovery — 410+ production-ready skills across 33+ domains
Complete developer workflow toolkit. Includes 34 reference skills, 34 specialized agents, and 21 slash commands covering TDD, debugging, code review, architecture, documentation, refactoring, security, testing, git workflows, API design, performance, UI/UX design, plugin development, and incident response. Full SDLC coverage with MCP integrations.