Plugins
3 pluginscurated
MCP Security Audit Pipeline
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
12 skills · plugin
@dotnet
Dotnet Maui
Skills for .NET MAUI development: environment setup, diagnostics, troubleshooting, navigation, data binding, dependency injection, layout, and theming.
8 skills · plugin
@samyakjhaveri
Sam Superpowers
Fork of obra/superpowers 5.0.7: the 14 core skills (TDD, debugging, collaboration patterns) with the mandatory-gate SessionStart injection replaced by a short judgment-based router. Skills are tools, not gates.
14 skills · plugin
Results for “inject”
289 skillsHs
Blocks dangerous shell commands and warns on risky ones, applying a safety protocol before executing any command.
1 · bundle
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
9 · bundle
Security Scan
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
0
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
0 · bundle
Design Design Whimsy Injector
Expert creative specialist focused on adding personality, delight, and playful elements to brand experiences. Creates memorable, joyful interactions that differentiate brands through unexpected moments of whimsy
2
Security Scan
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
1
Content Humanizer
Transforms AI-generated text into authentic, human-sounding writing by detecting AI patterns, fixing rhythm, and injecting brand voice.
20.4k · bundle
Security Review
Conducts systematic security code reviews to identify exploitable vulnerabilities, reporting only high-confidence findings after researching the codebase.
845 · bundle
API Security
Implements secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common vulnerabilities.
10 · bundle
Eric Andre Expert
Adopts the chaotic, confrontational persona of comedian Eric Andre to inject absurdist humor and discomfort into conversations, interviews, and creative work.
6
Software Architecture
Enforces system design, project structure, dependency management, error handling, testing, and documentation standards at principal-engineer level.
0
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
0 · bundle
Angular Migration
Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning framework migrations, or modernizing legacy Angular code.
0
Secure Code Guardian
Guides implementing authentication, authorization, input validation, and OWASP Top 10 prevention with secure code patterns and validation checkpoints.
10.4k · bundle
Varlock
Manages environment variables securely by validating against a schema, masking sensitive values, and injecting validated secrets into commands without exposing them.
2
Comfyui
Generate images, video, and audio with ComfyUI — install, launch, manage nodes/models, run workflows with parameter injection. Uses the official comfy-cli for lifecycle and direct REST/WebSocket API for execution.
0 · bundle
Python Security
Secure Python services against secret leakage, injection, unsafe subprocess calls, and dependency drift. Use when handling env vars, tokens, SQL, file paths, shell commands, auth flows, or Python security gates.
542 · bundle
Comfyui
Generate images, video, and audio with ComfyUI — install, launch, manage nodes/models, run workflows with parameter injection. Uses the official comfy-cli for lifecycle and direct REST/WebSocket API for execution.
0 · bundle
Comfyui
Generate images, video, and audio with ComfyUI — install, launch, manage nodes/models, run workflows with parameter injection. Uses the official comfy-cli for lifecycle and direct REST/WebSocket API for execution.
0 · bundle
PHP Pro
Build modern PHP applications with strict typing, PHPStan level 9, Laravel or Symfony, and enterprise patterns including DTOs, DI, and comprehensive testing.
10.4k · bundle
Database Security
Performs authorized database security assessments across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis, checking exposure, authentication, authorization, dangerous configurations, and exploit paths.
12.8k · bundle
Xxe
Detect and exploit XML External Entity (XXE) injection vulnerabilities in XML parsers, including file disclosure, SSRF, and blind out-of-band exfiltration.
21
Input Guard
Scan untrusted external text (web pages, tweets, search results, API responses) for prompt injection attacks. Returns severity levels and alerts on dangerous content. Use BEFORE processing any text from untrusted sources.
65 · bundle
Superpowers Sage Wp Security
WordPress security hardening — nonce verification, wp_nonce_field, check_admin_referer, sanitize_text_field, sanitize_email, esc_html, esc_attr, esc_url, wp_kses, SQL injection prevention, $wpdb->prepare(), capability checks, current_user_can, authentication hardening, wp-config.php secrets, security headers, file permissions, Bedrock .env secrets, disable XML-RPC, brute force wp-login.php, CSRF protection. Invoke for: security audit, input sanitization, output escaping, nonce verification, SQL injection prevention, CSRF protection, capability checks in REST endpoints.
13
K8S
Runs kubectl and helm commands with kubeconfig injection, emphasizing parallel execution, JSON output with jq filtering, and batch operations for efficient cluster management.
7 · bundle
Security And Hardening
Hardens code against vulnerabilities by applying threat modeling, OWASP Top 10 prevention patterns, and secure coding practices for web applications.
69.5k
Angular Developer
Generates Angular code and provides architectural guidance for projects, components, services, reactivity, forms, dependency injection, routing, SSR, accessibility, animations, styling, testing, and CLI tooling.
546 · bundle
Hunting For Registry Persistence Mechanisms
Hunt for registry-based persistence mechanisms including Run keys, Winlogon modifications, IFEO injection, and COM hijacking in Windows environments.
24.6k · bundle
UI Demo
Records polished UI demo videos of web applications using Playwright, with an injected cursor overlay, natural pacing, and a discover-rehearse-record workflow.
1
GCP
Executes GCP CLI commands with credential injection and enforces anti-hallucination rules for billing data analysis, including net cost calculation, currency detection, and anomaly detection.
7 · bundle
Fastapi Python
Write, review, debug, and test Python FastAPI applications with path operations, dependencies, Pydantic models, lifespan, middleware, background tasks, exception handling, and ASGI tests.
0 · bundle
Security Privacy Gate
Use `analysis-agent` to analyze permissions, secrets, sensitive data, trust boundaries, and injection; `task-agent` to implement controls; and `review-agent` to assess evidence. Skip self-review and no-trust-impact work.
4 · bundle
Lang Dotnet Dev
Foundational .NET patterns covering runtime, project structure, dependency injection, configuration, metaprogramming, and cross-platform development. Use when working with .NET projects or CLI tools. This is the entry point for .NET development.
8
Testing Websocket API Security
Tests WebSocket API implementations for security vulnerabilities including missing authentication, Cross-Site WebSocket Hijacking, injection attacks, and denial-of-service.
24.6k · bundle
Securing Agentic AI Tool Invocation
Apply least-privilege tool allowlisting, identity binding, and human-in-the-loop controls for agent tool calls.
24.6k · bundle
Whimsy Injector
Audits product flows to find delight opportunities, then specifies micro-interactions, animations, and usability risk assessments that balance playful design with functional clarity.
2