Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Agent skills for squirrelscan, the website QA tool for your coding agent (300+ audit rules).

Tu equipo de desarrolladores en un plugin. 10 agentes, 11 skills planas, 18 comandos /alfred-dev:*. Memoria persistente, quality gates con evidencia y MCP local.

Claude Code in OpenCode — local CLI auth, Agent SDK harness, effort variants, tools/MCP, images & compact.

No description yet.

CVE hunting harness for Claude Code - 20 skills, 5-agent team, systematic vulnerability research with false positive elimination

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

Production-ready Claude Code 2.0 setup for autonomous development

A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.

Quality review of a diff: bugs, security, real load, missing tests, speed, and what to delete. Each finding says what goes wrong and how to fix it.

Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including when the user describes a need without naming a Cloudflare product; then find the relevant skill or documentation.

Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most important first.

Use openai-codex models and image generation via ChatGPT OAuth for DeepSeek Harness.

DSH plugin - framework upgrade safety & plugin gating: contract pre-check, rollback point, auto-rollback on failure, evidence-based auto-disable; plus a multi-source plugin market. Unofficial. | DSH 插件：框架升级安全 + 插件门控——升级前契约预检、回滚点、失败自动回滚、有确证证据才自动禁用；另带多源插件市场。非官方社区项目。

Use ChatGPT Codex, Claude, Grok, Antigravity, Kimi, GLM, Cursor, Kiro, Copilot, Qwen, ERNIE, Spark, JetBrains, Perplexity, Replit, and Cody subscriptions as DeepSeek Harness LLM providers via OAuth.

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Gives AI coding agents on-demand security playbooks, a code scanner they can run on their own output, and live lookups against CISA KEV, NVD and OSV so they verify threats instead of guessing. Runs locally with no API keys or accounts, exposing skills, tools and a secure-build prompt to Claude Code, Codex, Cursor or any MCP client.

Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.

Enables zero-auth agent workflows for email OTP extraction, KV checkpoints, webhook bins, wake timers, and clean URL-to-Markdown reading.

Enables an AI agent to ask your phone for its current location on demand with consent, via a self-hosted relay and OAuth instead of API keys. The relay requests a fresh GPS fix and returns the answer without keeping location history.

Automatic provider/model fallback chains for DeepSeek Harness agents when LLM requests keep failing (retry exhausted, auth, quota, rate limit)

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 634 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabilities with a per-class knowledge base, chains findings into escalations, verifies real impact, and reports to README/JSON/SARIF/doc/PDF.