Help us improve
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
By sethdford
Application security testing including SAST, DAST, dependency scanning, API security, and web security headers.
npx claudepluginhub sethdford/claude-skills --plugin security-application-securityAudit API design, authentication, rate limiting, and input validation for security gaps.
Scan application dependencies for known vulnerabilities and create remediation roadmap.
Execute comprehensive security testing including SAST, DAST, and penetration testing.
Review API security including authentication, authorization, rate limiting, input validation, and data exposure.
Design and deploy Content-Security-Policy (CSP) to prevent XSS attacks and unauthorized resource loading.
Design and execute Dynamic Application Security Testing (DAST) test plans to find runtime vulnerabilities in web applications.
Scan application dependencies for known vulnerabilities and manage security updates across supply chain.
Define penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.
Share bugs, ideas, or general feedback.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Security testing toolkit with HTTP header analysis, dependency auditing, and static code scanning
Security scanning, dependency CVE audits, and exposure-aware risk prioritization.
Secure coding, OWASP guidance, input validation, cryptography, authentication, and secrets management for secure application development.
AI-powered security auditing with interactive skills, automated agents, web dependency scanning, and supply chain hardening for comprehensive vulnerability detection and reporting
Agents specialized in security engineering and threat mitigation. Focuses on secure architecture, vulnerability assessment, and compliance.
Security best practices advisor with vulnerability detection and fixes
Establish architecture governance, design fitness functions, manage tech debt, and ensure compliance. Build sustainable architecture practices.
QA skills for accessibility-testing domain.
QA skills for api-testing domain.
Master architecture communication: C4 models, RFCs, presentations, and documentation. Align stakeholders and explain architectural decisions.
Product vision, strategy, positioning, and go-to-market planning.
Comprehensive, standards-grounded Claude Code skills for every role in the Product Development Lifecycle.
454 skills and 173 commands across 57 plugins for 8 roles.
| Role | Skills | Commands | Plugins | Standards Alignment |
|---|---|---|---|---|
| architect | 63 | 10 | 8 | TOGAF, IASA BTABoK, ISO 42010, SWEBOK v4 |
| engineer | 65 | 26 | 8 | SWEBOK v4, SFIA v9, DORA, SPACE, ISO 25010 |
| product-manager | 65 | 26 | 8 | AIPMM PmBoK, ISPMA SPMBoK, PDMA NPDP |
| tech-lead | 63 | 25 | 8 | SFIA v9, DORA/Accelerate, Team Topologies |
| security | 64 | 25 | 8 | NIST CSF 2.0, OWASP SAMM, MITRE ATT&CK, ISO 27001 |
| designer | 63 | 27 | 8 | WCAG 2.2, ISO 9241, Nielsen Heuristics |
| qa-engineer | 63 | 26 | 8 | ISTQB, ISO 25010, WCAG 2.2, IEEE 829 |
| sdlc | 8 | 8 | 1 | ISO/IEC 12207, ISO/IEC 15288 |
Every skill is built on three principles:
claude install github:sethdford/claude-skills/engineer
claude install github:sethdford/claude-skills/engineer/testing
claude install github:sethdford/claude-skills
| Plugin | Skills | Commands | Focus |
|---|---|---|---|
| system-design | 10 | 4 | Decomposition, DDD, microservices, event-driven, CQRS |
| quality-attributes | 8 | 3 | Scalability, reliability, performance, trade-off analysis |
| decision-making | 8 | 3 | ADRs, technology radar, build-vs-buy, migration strategy |
| data-architecture | 8 | 3 | Data modeling, storage selection, event sourcing, pipelines |
| infrastructure-design | 8 | 3 | Cloud architecture, deployment, DR, multi-region |
| architecture-governance | 7 | 3 | Principles, fitness functions, tech debt, compliance |
| communication | 7 | 3 | C4 diagrams, RFCs, stakeholder presentations, roadmaps |
| architect-toolkit | 7 | 3 | Katas, reviews, mentoring, anti-patterns catalog |
| Plugin | Skills | Commands | Focus |
|---|---|---|---|
| code-quality | 10 | 4 | Clean code, refactoring, SOLID, code smells |
| testing | 9 | 4 | TDD, property-based testing, test architecture |
| debugging | 8 | 3 | Systematic debugging, root cause analysis, postmortems |
| implementation-patterns | 8 | 3 | Design patterns, data structures, concurrency |
| api-development | 8 | 3 | REST, GraphQL, gRPC, API design and testing |
| devops-practices | 8 | 3 | CI/CD, containers, deployment, monitoring |
| database-engineering | 7 | 3 | Schema design, query optimization, migrations |
| engineer-toolkit | 7 | 3 | Technical writing, git workflow, incident response |