Browse plugins

This plugin documents AI-generated codebases and audits them for security/performance gaps by comparing documented intent against actual implementation, producing a reviewer-ready shipping packet. It provides five commands to reverse-engineer architecture, map test coverage, and identify risks that generic scanners miss.

This Claude Code plugin provides eight skills for threat modeling, security architecture review, incident response, vulnerability management, and access/identity governance. It enforces blocking findings that cannot be overruled by reviewed departments, establishing a strict security governance framework.

This Agent Skill assesses software projects against enterprise-grade standards including OpenSSF Scorecard, Best Practices Badges (Passing/Silver/Gold), SLSA, and supply chain security frameworks. It provides dynamic cross-platform scoring, quality gates, automated security hardening scripts, and guided certification pathways with no external API dependencies.

This plugin provides eight specialized skills for contract review, privacy protection, enterprise risk assessment, corporate governance, compliance verification, and audit readiness. Its reviewer-class findings are authoritative and cannot be overridden by the department under review.

This skill provides a conformance ruleset and self-contained checker for TYPO3 v14 site/project repositories, validating repository layout, Docker/Compose topology, Concourse CI pipelines, supply-chain security, secret handling, and runtime configuration against the Netresearch gold standard. The bundled checker (check.py) requires only Python 3 and PyYAML to audit a target repo and generate a prioritized remediation list across seven rule families (STRUCT, CONTAINER, CI, DEPLOY, DEP, SEC, DOC).