Security auditor for AI agent configurations. Scans Claude Code setups for vulnerabilities, misconfigs, and injection risks.

PYA (Protect Your Ass): security audit plugin for Claude Code. 9 specialist agents, a dated threat feed, verified findings, offline by default.

Agent skills for squirrelscan, the website QA tool for your coding agent (300+ audit rules).

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Claude Code plugin for Java JAR security audit — 基于 jar-analyzer 的 Claude Code 安全审计插件，构建数据库，AI 深入分析

Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.

Stop AI agents from doing things you didn't ask for.

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.