10 plugins, each analyzed from its own files.
phuryn
This plugin documents AI-generated codebases and audits them for security/performance gaps by comparing documented intent against actual implementation, producing a reviewer-ready shipping packet. It provides five commands to reverse-engineer architecture, map test coverage, and identify risks that generic scanners miss.
5 commands · 2 skills
#security-audit#code-review#documentation#vibe-code
ccplugins
This plugin performs security audits on codebases through a single command that analyzes code for potential vulnerabilities and security issues. It operates without requiring external dependencies or third-party services.
1 command
#security-audit#codebase-scanning#vulnerability-detection#code-security
ccplugins
This agent implements AI ethics frameworks, governance policies, and responsible AI practices for B2B applications, focusing on bias detection and algorithmic transparency. It helps enterprises establish AI governance structures and compliance requirements that build trust in AI systems.
1 agent
#ai-ethics#governance#bias-detection#compliance
ccplugins
This agent implements data privacy engineering and GDPR compliance frameworks for B2B applications, covering data minimization, consent management, and privacy-by-design principles. It specializes in helping enterprises meet global privacy regulation requirements across their platforms.
1 agent
#gdpr-compliance#data-privacy#privacy-engineering#consent-management
cbrock84
This Claude Code plugin provides eight skills for threat modeling, security architecture review, incident response, vulnerability management, and access/identity governance. It enforces blocking findings that cannot be overruled by reviewed departments, establishing a strict security governance framework.
8 skills
#threat-modeling#security-review#incident-response#vulnerability-management
ccplugins
This agent automates compliance processes for major regulatory frameworks including SOC 2, ISO 27001, GDPR, and HIPAA, helping B2B platforms with audit preparation and continuous monitoring. It provides a specialized interface for implementing and managing enterprise regulatory requirements without external dependencies.
1 agent
#compliance-automation#soc2#iso27001#gdpr
netresearch
This Agent Skill assesses software projects against enterprise-grade standards including OpenSSF Scorecard, Best Practices Badges (Passing/Silver/Gold), SLSA, and supply chain security frameworks. It provides dynamic cross-platform scoring, quality gates, automated security hardening scripts, and guided certification pathways with no external API dependencies.
2 commands · 1 skill
#openssf-compliance#supply-chain-security#slsa-framework#enterprise-audit
ccplugins
This plugin provides an AI agent that conducts comprehensive security assessments and compliance validation for B2B SaaS platforms, covering SOC 2, GDPR, and ISO 27001 standards. It specializes in multi-tenant security reviews, enterprise compliance checks, and audit preparation without requiring external API keys or tools.
1 agent
#security-audit#compliance-review#b2b-saas#soc2
cbrock84
This plugin provides eight specialized skills for contract review, privacy protection, enterprise risk assessment, corporate governance, compliance verification, and audit readiness. Its reviewer-class findings are authoritative and cannot be overridden by the department under review.
8 skills
#contract-review#compliance#data-protection#enterprise-risk
netresearch
This skill provides a conformance ruleset and self-contained checker for TYPO3 v14 site/project repositories, validating repository layout, Docker/Compose topology, Concourse CI pipelines, supply-chain security, secret handling, and runtime configuration against the Netresearch gold standard. The bundled checker (check.py) requires only Python 3 and PyYAML to audit a target repo and generate a prioritized remediation list across seven rule families (STRUCT, CONTAINER, CI, DEPLOY, DEP, SEC, DOC).
1 skill
#typo3-site-config#docker-compose-validation#concourse-ci-audit#supply-chain-gating