Plugins
5 pluginscurated
Agent Governance Pipeline
Implement policy enforcement, intent classification, and audit trails for AI agents.
9 skills · plugin
@micsapp
Discord
Discord channel for Claude Code — messaging bridge with built-in access control. Manage pairing, allowlists, and policy via /discord:access.
2 skills · plugin
@phuryn
Toolkit
PM utility skills: resume review, NDA drafting, privacy policy generation, and grammar/flow checking. Essential tools for product managers beyond core product work.
4 skills · plugin
@brycewang-stanford
CHI Skills
Twelve CHI-specific skills for human-computer interaction conference strategy, grounded in the CHI 2027 Papers call, review-process pages, SIGCHI accessibility and video guides, and ACM open-access policy.
2 skills · plugin
@alirezarezvani
Commercial
Per-deal-and-packaging Commercial domain. v2.8.0 ships 8 skills: orchestrator + pricing-strategist (model picker + Van Westendorp WTP + packaging) + deal-desk (deal scorer + discount approval routing + redline) + partnerships-architect (5-tier classifier + joint GTM + revshare modeler) + channel-economics (cost-to-serve + ROI + mix optimizer) + commercial-policy (data-backed discount matrix + exce
8 skills · plugin
Results for “policy”
13 skillsCsp Policy Analyzer
Parses and evaluates Content Security Policy headers using csp-parse and csp-evaluator libraries. Identifies overly permissive directives, missing protections, and generates tightened policy recommendations.
28
Auditing GCP Iam Permissions
Audits Google Cloud Platform IAM permissions to identify overly permissive bindings, primitive role usage, service account key proliferation, and cross-project access risks using gcloud CLI, Policy Analyzer, and IAM Recommender.
24.6k · bundle
Managing Opa
Manage and inspect OPA policies, Gatekeeper constraints, and Rego rules, including discovery, testing, and audit analysis.
7
Security Compliance Automation
Automates security and compliance checks using OPA policies, Trivy vulnerability scanning, AWS CIS benchmark verification, and Kubernetes remediation scripts.
4 · bundle
Scanning Docker Images With Trivy
Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.
24.6k · bundle
Detecting Serverless Function Injection
Detects and prevents code injection attacks targeting serverless functions through static analysis, event source poisoning detection, and IAM policy auditing.
24.6k · bundle
More results
Detecting AWS Iam Privilege Escalation
Identify AWS IAM privilege escalation paths by analyzing policies for dangerous permission combinations and least-privilege violations using boto3 and Cloudsplaining-style analysis.
24.6k · bundle
Performing Security Headers Audit
Audits HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.
24.6k · bundle
Wifi Wireless
Guides authorized Wi-Fi security assessments including handshake capture, PMKID collection, rogue AP detection, and offline password policy evaluation using aircrack-ng, hashcat, and Wireshark.
12.8k · bundle
Implementing Container Network Policies With Calico
Enforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.
24.6k · bundle
Auditing AWS S3 Bucket Permissions
Audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, Prowler, and IAM Access Analyzer.
24.6k · bundle
Implementing Runtime Application Self Protection
Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.
24.6k · bundle
Remediating S3 Bucket Misconfiguration
Identify and remediate Amazon S3 bucket misconfigurations that expose sensitive data, including enabling Block Public Access, auditing policies and ACLs, enforcing encryption, configuring access logging, and deploying automated remediation with AWS Config and Lambda.
24.6k · bundle