Plugin catalog

All 45 plugins, grouped by bucket. This page is generated from marketplace.json at build time — it always matches what you can actually install. Use the search (press /) to find a plugin by keyword.

Install any of them with:

/plugin install <name>@awesome-claude-security

Core 4 · Domain 17 · GenAI security 5 · AI safety 1 · Roles 11 · Executive 2 · Suites 5

Core

Cross-cutting capabilities every security task reuses — diagrams, reports, framework lookups, publishing.

Plugin	What it does	Install
security-diagramming	Attack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based). diagram excalidraw attack-tree dfd mindmap infographic	/plugin install security-diagramming@awesome-claude-security
security-integrations	Publish security work where teams live: findings to Jira, reports/runbooks to Confluence, and reports/diagrams to Google Drive (Atlassian MCP wired). integrations jira confluence google-drive mcp publishing	/plugin install security-integrations@awesome-claude-security
security-knowledge	Shared reference packs for consistent mapping: MITRE ATT&CK lookup, OWASP Top 10 families (Web/API/LLM/Mobile), and cross-framework crosswalks (CWE, NIST, CIS, ISO 27001). reference mitre-attack owasp cwe nist iso-27001	/plugin install security-knowledge@awesome-claude-security
security-reporting	Generate consistent findings, pentest reports, vulnerability writeups, and executive summaries from your work. reporting findings pentest-report executive-summary cvss	/plugin install security-reporting@awesome-claude-security

Domain

One deep skillset per discipline — appsec, cloud, network, detection, DFIR, threat intel, and more.

Plugin	What it does	Install
api-security	API security testing: OWASP API Security Top 10 assessment and object/function-level authorization (BOLA/BFLA) testing. api appsec owasp-api bola bfla graphql	/plugin install api-security@awesome-claude-security
claude-config-security	Static security review of a Claude Code / AI-agent configuration (settings, permissions, hooks, MCP servers, agents, skills, CLAUDE.md) via the agentscanner CLI: scan, triage, harden. claude-code agentscanner config-security hooks mcp permissions	/plugin install claude-config-security@awesome-claude-security
cloud-security	Cloud security (AWS/Azure/GCP): posture review, IAM least-privilege review, and misconfiguration scanning. cloud aws azure gcp cspm iam	/plugin install cloud-security@awesome-claude-security
detection-engineering	Detection engineering: detection-as-code rule development (Sigma/YARA/KQL/SPL), ATT&CK coverage gap analysis, and hypothesis-driven threat hunting. detection sigma yara mitre-attack threat-hunting siem	/plugin install detection-engineering@awesome-claude-security
dfir	Digital forensics & incident response: drive the IR lifecycle (NIST 800-61 / PICERL), forensic evidence triage and timelining, and IOC development. dfir incident-response forensics nist-800-61 ioc	/plugin install dfir@awesome-claude-security
infrastructure-security	Infrastructure security: Infrastructure-as-Code (IaC) security review, host/OS hardening against CIS benchmarks, and secrets-management review. infrastructure iac terraform cis hardening secrets	/plugin install infrastructure-security@awesome-claude-security
k8s-security	Kubernetes security: cluster review (CIS / 4Cs), RBAC least-privilege audit, and workload/pod hardening (Pod Security Standards). kubernetes k8s rbac pod-security cis container	/plugin install k8s-security@awesome-claude-security
mobile-security	Mobile app security (Android/iOS): OWASP MASVS review and MASTG-based testing methodology. mobile android ios masvs mastg appsec	/plugin install mobile-security@awesome-claude-security
network-security	Network security: authorized network penetration testing, segmentation/firewall review, and protocol/service security assessment. network pentest segmentation firewall protocol lateral-movement	/plugin install network-security@awesome-claude-security
osint	Open-source intelligence: external footprinting & attack-surface mapping, exposure discovery (leaks/exposed assets), and people/social recon. osint recon footprinting attack-surface exposure	/plugin install osint@awesome-claude-security
sast-sca	Static analysis (SAST) and software composition analysis (SCA): run/triage code scans, dependency/SBOM analysis, and prioritize findings. sast sca appsec sbom dependencies triage	/plugin install sast-sca@awesome-claude-security
secure-coding	Secure-coding enforcement for Python and React/JS: flags outdated/vulnerable functions with a safe alternative (curated CWE/OWASP-ASVS rule pack + Semgrep), and blocks commits/pushes carrying secrets, cloud keys, or sensitive config via both a Claude Code hook and installable real git hooks. secure-coding python react javascript secrets git-hooks	/plugin install secure-coding@awesome-claude-security
supply-chain-security	Software supply-chain security: dependency trust review (typosquatting/dependency-confusion/maintainer risk), artifact provenance & signing (SLSA/Sigstore), and CI/CD pipeline integrity. supply-chain slsa sigstore provenance dependency-confusion ci-cd	/plugin install supply-chain-security@awesome-claude-security
threat-intelligence	Cyber threat intelligence: run the CTI lifecycle with structured analysis, enrich and pivot on IOCs, and profile threat actors/campaigns (ATT&CK, Diamond Model). cti threat-intel mitre-attack diamond-model actor-profiling	/plugin install threat-intelligence@awesome-claude-security
threat-modeling	STRIDE / PASTA threat modeling, data flow diagrams, attack trees, and risk-ranked mitigations. threat-modeling stride pasta dfd risk	/plugin install threat-modeling@awesome-claude-security
vulnerability-management	Risk-based vulnerability management: triage and dedupe scanner output, prioritize with CVSS/EPSS/CISA KEV + asset context, and track remediation against SLAs. vulnerability-management cvss epss kev prioritization remediation	/plugin install vulnerability-management@awesome-claude-security
web-app-security	Web application security testing: OWASP Web Top 10 assessment, access-control/IDOR testing, and injection testing. web appsec owasp xss sqli access-control	/plugin install web-app-security@awesome-claude-security

GenAI security

Protecting AI/LLM systems from attackers — prompt injection, RAG poisoning, agent autonomy, ML supply chain.

Plugin	What it does	Install
agentic-ai-security	Security for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency. agentic ai-agent genai excessive-agency tool-use	/plugin install agentic-ai-security@awesome-claude-security
llm-security	OWASP LLM Top 10 assessment, prompt-injection testing, and threat modeling for LLM, RAG, and agentic AI systems. llm genai owasp-llm prompt-injection rag ai-agent	/plugin install llm-security@awesome-claude-security
mlops-security	Security for the ML lifecycle and infrastructure: ML supply chain (model/dataset provenance, unsafe deserialization), training/MLOps pipeline security, and model-serving hardening. mlops ml-security model-supply-chain model-serving data-poisoning genai	/plugin install mlops-security@awesome-claude-security
multimodal-security	Security for multimodal AI: cross-modal injection testing (image/audio/document) and input-handling review across modalities. multimodal genai image-injection ocr adversarial	/plugin install multimodal-security@awesome-claude-security
rag-security	Security for Retrieval-Augmented Generation: pipeline review, retrieval/data poisoning testing, and vector-store isolation checks. rag genai retrieval vector-store poisoning	/plugin install rag-security@awesome-claude-security

AI safety

A distinct discipline — stopping AI systems from causing harm: harm modeling, safety evals, bias/fairness, guardrails.

Plugin	What it does	Install
ai-safety	AI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance. ai-safety responsible-ai harm bias fairness guardrails	/plugin install ai-safety@awesome-claude-security

Roles

Persona bundles that combine domains with a workflow and auto-install their whole stack.

Plugin	What it does	Install
ai-safety-engineer	AI safety engineer role bundle: build and operationalize safeguards (evals-in-CI, guardrails, monitoring, safety cases, governance). Auto-installs the ai-safety stack. ai-safety responsible-ai role bundle safety-case	/plugin install ai-safety-engineer@awesome-claude-security
blue-team	Blue-team role bundle: threat-informed defense across detection, response, hunting, and intel, plus purple-team validation. Auto-installs the defensive stack. blue-team defense role bundle purple-team	/plugin install blue-team@awesome-claude-security
developer	Developer role bundle: secure-by-default coding companion for engineers, including AI-assisted/agentic coding workflows — secure coding patterns, PRD/prompt security requirements, and a pre-commit security gate. Auto-installs the core secure-dev stack. developer secure-coding secure-by-design role bundle pre-commit	/plugin install developer@awesome-claude-security
grc	Governance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming. grc compliance risk governance iso-27001 soc2	/plugin install grc@awesome-claude-security
pentester	Pentester role bundle: recon workflow, methodology-driven testing, and engagement reporting. Auto-installs its core/domain stack (osint, web, network, threat-modeling). pentest offensive recon role bundle	/plugin install pentester@awesome-claude-security
red-team	Red-team role bundle: objectives-based adversary emulation aligned to real threat-actor TTPs (ATT&CK), from recon to impact. Auto-installs its offensive + intel stack. red-team adversary-emulation offensive role bundle mitre-attack	/plugin install red-team@awesome-claude-security
responsible-ai-officer	Responsible-AI governance role: AI use-case intake & risk-tiering, oversight, documentation, and compliance (NIST AI RMF / EU AI Act / ISO 42001). Auto-installs the ai-safety stack. responsible-ai ai-governance grc role eu-ai-act nist-ai-rmf	/plugin install responsible-ai-officer@awesome-claude-security
security-analyst	Security analyst role bundle: investigation and analysis (T2/T3) — correlate telemetry, enrich with intel, reconstruct timelines, and reach evidence-backed verdicts. Auto-installs the defensive stack. security-analyst investigation analysis role bundle	/plugin install security-analyst@awesome-claude-security
security-architect	Security architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack. security-architect secure-by-design design-review role bundle	/plugin install security-architect@awesome-claude-security
security-engineer	Security engineer role bundle: build and harden — DevSecOps, secure CI/CD pipelines, control implementation, and remediation across code, cloud, and infrastructure. Auto-installs its stack. security-engineer devsecops hardening ci-cd role bundle	/plugin install security-engineer@awesome-claude-security
soc-siem	SOC / SIEM operations role bundle: alert triage, monitoring, enrichment, and tiered escalation. Auto-installs the defensive stack. soc siem role bundle alert-triage monitoring	/plugin install soc-siem@awesome-claude-security

Executive

The strategic tier — security strategy, cyber-risk quantification, board-ready narratives.

Plugin	What it does	Install
ciso-toolkit	CISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling. ciso executive strategy risk-quantification board governance	/plugin install ciso-toolkit@awesome-claude-security
cto-security	CTO security advisor: secure-by-design at scale (paved roads, guardrails, enablement) and technology-risk assessment for strategic decisions. Auto-installs threat-modeling, diagramming, reporting. cto executive secure-by-design tech-strategy paved-road	/plugin install cto-security@awesome-claude-security

Suites

One-shot domain bundles — install a whole area at once; its parts come along automatically.

Plugin	What it does	Install
ai-safety-suite	Trustworthy-AI suite: pairs AI safety with the full GenAI security stack (ai-safety + genai-suite). suite bundle trustworthy-ai ai-safety ai-security	/plugin install ai-safety-suite@awesome-claude-security
appsec-suite	Domain suite: one-shot install of the appsec plugins (web, API, mobile, SAST/SCA). suite bundle appsec web api mobile	/plugin install appsec-suite@awesome-claude-security
blueops-suite	Defensive operations suite: one-shot install of detection-engineering, dfir, and threat-intelligence. suite bundle blue-team soc detection dfir	/plugin install blueops-suite@awesome-claude-security
cloud-suite	Domain suite: one-shot install of cloud-security, k8s-security, and infrastructure-security. suite bundle cloud kubernetes iac infrastructure	/plugin install cloud-suite@awesome-claude-security
genai-suite	Domain suite: one-shot install of the GenAI / AI-security plugins (LLM, RAG, agentic, multimodal, MLOps). suite bundle genai ai-security llm	/plugin install genai-suite@awesome-claude-security

---

Bundles (roles, suites) auto-install their dependencies — see Bundles & dependencies. New to the marketplace? Start with Getting started.