Plugins
12 pluginscurated
Security
Security audits, vulnerability scanning and secure coding.
30 skills · plugin
@dotnet
Dotnet Template Engine
.NET Template Engine skills: template discovery, project scaffolding, and template authoring.
6 skills · plugin
curated
Create and Share Agent Skills
Scaffold, build, verify, and share a new agent skill with the team.
11 skills · plugin
curated
Publish Mobile-First Page
Scaffold and publish a mobile-first page with responsive layout and design tokens.
4 skills · plugin
curated
Build Spring Boot REST API
Scaffold a Spring Boot project and implement REST API following best practices.
3 skills · plugin
curated
PR Review Pipeline
Install this pack to review a PR with structured analysis, security scanning, and quality enforcement.
11 skills · plugin
curated
Quarkus Release Pipeline
Install this pack to run build, static analysis, security scan, and diff review before a Quarkus release.
3 skills · plugin
@microsoft
Microsoft 365 Agents Toolkit
Toolkit for building and evaluating Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, capability configuration, and eval workflows.
6 skills · plugin
curated
Analyze Single-Cell RNA-Seq
Analyze single-cell RNA-seq data using Scanpy, including quality control, normalization, clustering, marker gene identification, and visualization.
9 skills · plugin
@klotzkette
Betreuungsrecht
Betreuungsrechtliche Skills für ehrenamtliche Familienbetreuer, Berufs- und Vereinsbetreuer: Kaltstart, Scan-Akte, Kalender, Gerichtskommunikation, Jahresbericht, Vermögensverzeichnis, Genehmigungspflichten, Wunschermittlung, Kontoanalyse und Schutzplan nach BtOG und BGB.
2 skills · plugin
@trailofbits
Building Secure Contracts
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
11 skills · plugin
curated
Build MVP from Spec
Turn a design or spec document into a working MVP by planning thin vertical slices, scaffolding, then building iteratively with TDD and gated commits.
5 skills · plugin
Results for “sca”
1,240 skillsPolish
Runs a full quality pass that chains parallel UX and scalability audits, QA verification, and a consistency gate, fixing all issues found across any stack.
13
Container Security
Implements container security with image scanning, runtime protection, image signing, and security policies using tools like Falco, Trivy, and Notary.
4 · bundle
Security Compliance Automation
Automates security and compliance checks using OPA policies, Trivy vulnerability scanning, AWS CIS benchmark verification, and Kubernetes remediation scripts.
4 · bundle
Iac Misconfig Scan
Scan infrastructure-as-code — Dockerfiles, Compose, Terraform, and GitHub Actions — for security misconfigurations like running as root, world-writable files, unpinned actions, and hardcoded secrets. Pure Claude Code, no signup.
Bald Eagle Strategy
BALD EAGLE v3.0 — XYZ Alpha Hunter (Hardened). Focused on 6 high-liquidity XYZ assets: CL, BRENTOIL, GOLD, SILVER, SP500, XYZ100. Conviction-scaled leverage (5-10x based on score). Wider DSL for macro assets. Maker-only execution. Scanner calls create_position internally. v3.0: focused assets, conviction-scaled leverage, XYZ-tuned DSL, no thesis exit.
1 · bundle
Redis CLI
Query, inspect, and manage Redis databases from the command line using redis-cli, covering connection, data operations, scanning, and server diagnostics.
42.4k · bundle
Power Apps Code App Scaffold
Scaffold a complete Power Apps Code App project with PAC CLI setup, SDK integration, and connector configuration.
36.2k
Detecting Malicious NPM Packages
Triage npm packages for install-script malware, exfiltration, and worming behavior using GuardDog, manual inspection, and safe detonation.
24.6k · bundle
Geniml
Trains machine learning models on genomic interval data from BED files, including region embeddings, single-cell ATAC-seq analysis, and consensus peak building.
253 · bundle
New Page
Scaffold a new public page under the (public) route group, following project conventions for server components, tenant config, and shadcn/ui styling.
1
GCP Cloud Run
Manages and analyzes Google Cloud Run services using gcloud CLI, covering service discovery, revision traffic splitting, scaling, concurrency tuning, and container diagnostics.
7
Fading Manager
Track performance across sessions and reduce scaffolding as competence grows. Makes fading visible — the learner knows when scaffolds are removed and why. Use for sustained learning engagement where independence is the goal.
0
Ocr And Documents
Extract text from PDFs/scans (pymupdf, marker-pdf).
0 · bundle
Buy
Research purchases, compare prices, detect scams, and negotiate better deals.
12 · bundle
Programmatic SEO
Plan and blueprint programmatic SEO page strategies at scale
2 · bundle
Powerbi Model Create
Scaffold a New Power BI Semantic Model (TMDL)
0
Powerbi Directlake Create
Scaffold a New DirectLake Semantic Model (TMDL) (preview)
0
Codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality suite) and "important only" (high-precision security findings) scan modes. Also handles creating data extension models and processing CodeQL SARIF output.
3 · bundle
Django Verification
Runs a comprehensive verification pipeline for Django projects including migrations, linting, tests with coverage, security scans, and deployment readiness checks before PRs or releases.
226k
Performing Agentless Vulnerability Scanning
Configure and execute agentless vulnerability scanning using network protocols, cloud snapshot analysis, and API-based discovery to assess systems without installing endpoint agents.
24.6k · bundle
Websocket Engineer
Build real-time communication systems with WebSockets or Socket.IO, including bidirectional messaging, horizontal scaling with Redis, presence tracking, and room management.
10.4k · bundle
Dependency Auditor
Audit and manage dependencies across multi-language projects by scanning for vulnerabilities, license conflicts, and transitive dependency risks, with safe-upgrade planning.
20.4k · bundle
Skill Security Auditor
Scan and audit AI agent skills for security risks before installation, producing a PASS/WARN/FAIL verdict with findings and remediation guidance.
20.4k · bundle
Agent Owasp Compliance
Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks, scanning for controls and generating a compliance report.
36.2k
Tools
Curates a set of Ethereum development tools for 2026, including Foundry, Scaffold-ETH 2, abi.ninja, Blockscout MCP, x402 SDKs, RPC providers, and block explorers.
1.2k · bundle
Security Threat Intelligence
Routes security, compliance, and threat-intelligence tasks to specialized sub-skills for threat modeling, penetration testing, incident response, and vulnerability scanning.
2 · bundle
Doc Organizer
Scans repositories for markdown and HTML documentation, classifies files as repo-local or centralizable content, generates an inventory report, and optionally consolidates content into a centralized docs repository.
1
Logo Design
Creates SVG logos with scalable geometry, color theory, and variant generation. Use when designing logos, icons, or brand marks, generating favicons or social avatars, or reviewing a logo for scalability, color, or variant coverage.
0 · bundle
Mixed Content Scan
Scan an HTTPS page for mixed content — HTTP scripts, styles, images, iframes, and insecure form actions. Separates browser-blocked active mixed content from passive, with the exact offending URLs. Playwright MCP, no signup.
Senior QA
Generates unit tests, integration tests, and E2E tests for React/Next.js applications by scanning components, analyzing coverage reports, and scaffolding Playwright test files.
20.4k · bundle
Firebase Apk Scanner
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.
6k · bundle
Geniml
Train unsupervised machine learning models on genomic interval data from BED files, including region embeddings, single-cell ATAC-seq analysis, and consensus peak building.
30.2k · bundle
Acquisition Channel Advisor
Evaluate acquisition channels using unit economics, customer quality, and scalability to decide whether to scale, test, or kill a growth channel.
5.6k · bundle
Create Shell Plugin
Scaffolds a MariaDB Shell plugin folder with a correctly documented init.py or init.js, following the plugin registrar's conventions for decorators, docstrings, and loading paths.
0
Flaky Selector Scan
Scan a UI test suite (Playwright, Cypress, Selenium) for brittle locators — nth-child, absolute XPath, text-coupled, and auto-generated class hashes — and suggest stable role/data-test replacements. Pure Claude Code, no signup.
Ec2
Manage AWS EC2 virtual machines — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation.
1.1k · bundle