Help us improve
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
By naporin0624
Comprehensive SEO, WCAG 2.1 AA accessibility, web resource analysis, DevSecOps security testing, path discovery, CVE hunting, and bounty hunter agents
npx claudepluginhub naporin0624/seo-claude-plugins --plugin web-audit-toolsRun accessibility and HTML lint audit on files, then provide fix SUGGESTIONS (does NOT modify files) using WCAG/ARIA references
Comprehensive DevSecOps security audit that launches multiple specialized agents in parallel. Covers secrets, SAST, SCA, container security, and IaC scanning based on OWASP DevSecOps Guideline.
Run comprehensive SEO audit combining static analysis and Lighthouse
Run comprehensive web resource file audit (sitemap.xml, robots.txt, llms.txt, security.txt)
Two-phase intelligent attack strategy. Quick scan (path discovery + CVE) for fast reconnaissance, followed by deep scan (XSS/SQLi/CSRF/IDOR) for comprehensive coverage. Maximum efficiency, maximum bounty.
Analyzes HTML/JSX/TSX files for accessibility and HTML standard issues using axe-core and markuplint, then provides detailed fix SUGGESTIONS based on WCAG 2.1 AA criteria and WAI-ARIA patterns. This agent does NOT modify files - it only reports issues and suggests fixes. Use when user runs /a11y-audit command or asks to check accessibility issues in their code.
CSRF specialist bounty hunter. Expert at finding missing tokens and exploiting state-changing requests. Every unprotected form is a potential $1,000-$10,000 payday. Use when hunting specifically for CSRF vulnerabilities.
CVE specialist bounty hunter. Obsessed with known vulnerabilities and public exploits. Every outdated library is a potential $5,000-$50,000 payday. Use when hunting specifically for known CVE vulnerabilities in web stacks.
Secret detection specialist. Hunts for hardcoded credentials, API keys, tokens, and private keys in git repositories. Every exposed secret is a potential $1,000-$50,000+ finding. Use when scanning for secrets, credentials, or sensitive data in codebases.
Dockerfile security and best practices specialist using Hadolint. Analyzes Dockerfiles for security issues, best practice violations, and configuration problems. Use when reviewing Dockerfiles, container builds, or CI/CD pipeline security.
Proactively validates Claude Code's own generated HTML/JSX/TSX output for accessibility before presenting to users. Use this skill automatically when generating UI code to ensure WCAG 2.1 AA compliance.
Looks up OWASP Top 10 attack methods, CWE references, and form-specific vulnerability patterns with a bounty hunter mindset. Returns attack vectors, payloads, and payout estimates. Use when user asks about "XSS", "SQL injection", "CSRF", "OWASP", "CWE", "IDOR", "injection", "bypass", "vulnerability", "exploit", "SQLインジェクション", "クロスサイトスクリプティング", "脆弱性".
Scans containers and Dockerfiles for security issues. Wraps Hadolint for Dockerfile linting and Trivy for container image scanning. Use when user asks to "scan Dockerfile", "lint Dockerfile", "container security", "image scan", "Dockerセキュリティ", "コンテナスキャン".
Searches the NIST NVD database for CVE vulnerabilities using API 2.0. Returns CVE details, CVSS scores, affected software, and references. Use when user asks about "CVE", "vulnerability database", "NIST", "NVD", "security advisory", "CVE-2024", "CVE-2023", "脆弱性", "セキュリティアドバイザリ", or wants to find known vulnerabilities for specific software.
Looks up OWASP DevSecOps Guideline phases, security tools, and pipeline checks. Returns tool configurations, CWE mappings, and integration patterns for CI/CD security. Use when user asks about "DevSecOps", "SAST", "DAST", "SCA", "container security", "IaC security", "secret detection", "gitleaks", "semgrep", "trivy", "pipeline security", "シークレット検出", "静的解析", "動的解析", "コンテナセキュリティ", "セキュリティゲート".
Uses power tools
Uses Bash, Write, or Edit tools
Share bugs, ideas, or general feedback.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Website audit tool for SEO, performance, security & 230+ rules
FAT Agent (Fix, Audit, Test) — a post-launch quality assurance skill that audits deployed websites for SEO, security, accessibility, performance, and content issues.
AI-powered accessibility analysis - Interactive accessibility audit skill and automated agent with comprehensive WCAG compliance detection and reporting
Agent Skills for optimizing web projects against Google Lighthouse, Core Web Vitals, WCAG 2.2, and modern SEO — performance, accessibility, SEO, and best practices.
Full accessibility audit with WCAG compliance checking
A11y compliance testing with WCAG 2.1/2.2 validation, screen reader compatibility, and automated accessibility audits
Comprehensive SEO, WCAG 2.1 AA accessibility, web resource analysis, DevSecOps security testing, path discovery, CVE hunting, and bounty hunter agents
Claude Code plugin for Akai APC Mini MK2 MIDI controller development. Provides MIDI protocol lookup, LED mapping guides, color palette references, and TypeScript code samples for LED control.
Type-safe IPC communication for Electron applications using Hono RPC, CQRS architecture, and reactive state management. Provides factory pattern with DI, Observable queries, ResultAsync commands, and Jotai hybrid atoms.
A comprehensive Claude Code plugin providing SEO, WCAG 2.1 AA accessibility, and security testing tools with specialized bounty hunter agents.
# Add the marketplace
/plugin marketplace add naporin0624/seo-claude-plugins
# Install the plugin
/plugin install web-audit-tools@web-audit-marketplace
cd skills/seo-analyzer && npm install
cd skills/lighthouse-runner && npm install
cd skills/web-resource-checker && npm install
cd skills/cve-search && npm install
cd skills/form-security-analyzer && npm install
cd skills/playwright-security-runner && npm install
Run accessibility audit on files.
/a11y-audit path/to/file.html
/a11y-audit "src/**/*.tsx"
Comprehensive SEO audit with Lighthouse.
/seo-audit path/to/file.html # Full audit (static + lighthouse)
/seo-audit http://localhost:3000 # Lighthouse only
/seo-audit path/to/file.html static # Static analysis only
Combined SEO, accessibility, and web resource audit.
/web-audit path/to/file.html
/web-audit https://example.com
Deploy bounty hunter agents to attack a website from multiple angles.
# Deploy all hunters in parallel
/website-hunter http://localhost:3000
# Deploy specific hunters
/website-hunter http://localhost:3000 xss,sqli
# Just IDOR and CSRF
/website-hunter http://localhost:3000 idor,csrf
| Skill | Description |
|---|---|
seo-a11y-analyzer | Core analysis with 5-step workflow |
wcag-aria-lookup | WCAG 2.1 AA criteria and ARIA patterns lookup |
html-lint-runner | Automated linting with axe-core + markuplint |
seo-lookup | SEO best practices reference |
seo-analyzer | Static SEO analysis with cheerio |
lighthouse-runner | Lighthouse integration via Puppeteer |
web-resource-checker | sitemap.xml, robots.txt, llms.txt, security.txt validation |
attack-methods-lookup | OWASP Top 10 attack methods reference |
cve-search | NVD API integration for CVE search |
form-security-analyzer | Static security analysis for forms |
playwright-security-runner | Dynamic security testing with Playwright |
| Agent | Specialty | Bounty Range |
|---|---|---|
a11y-fixer | Accessibility fixes (read-only) | - |
xss-hunter | XSS vulnerabilities | $500 - $50,000 |
sqli-hunter | SQL injection | $2,000 - $50,000+ |
csrf-hunter | CSRF attacks | $500 - $20,000 |
idor-hunter | IDOR / Authorization bypass | $2,000 - $50,000+ |
The security testing tools include multiple safety features:
MIT
Naporitan (naporin0624)