COMPETITOR MONITORING FOR PLUGIN DEVELOPERS
Claude plugin directory
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 2,729 plugins across 15 categories.
Selected:secrets ×
Follow up to 3 plugins for free across Codex and Claude. Newest means first added to our catalog, not the publisher’s release date.
All plugins 36
1–36 of 36| Plugin / developer | Category | Follow |
|---|---|---|
swagger-contract-testingDeveloper not providedAI assistant skills and agents for PactFlow contract testing. Covers the full contract testing lifecycle — from writing and reviewing Pac... |
UncategorizedVersion not provided | View details → |
1Password Developer ToolsDeveloper not providedKeep secrets, API keys, and tokens out of committed .env files by importing and mounting them as 1Password Developer Environments. |
UncategorizedVersion not provided | View details → |
neus-trustNEUSVerified identity, limited permissions, reusable trust receipts, and Vault secrets. One setup for Cursor, Claude Code, Codex, and VS Code. |
DevelopmentVersion 1.3.5 | View details → |
webscannerEnder PhanA webscanner plugin that performs automated client-side web security assessments. Point it at any domain and it produces a structured Mar... |
UncategorizedVersion 1.0.0 | View details → |
webscanEnder PhanClient-side web security scanner — detects secrets, vulnerable JS libraries, misconfigurations, XSS sinks, CORS issues, and more |
UncategorizedVersion 1.0.0 | View details → |
vibeguardvibeguardSecurity auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypa... |
UncategorizedVersion 2.0.1 | View details → |
varlock-skillWill SmithSecure environment variable management with schema validation and secret masking. Validates secrets are set correctly without exposing va... |
UncategorizedVersion 1.0.0 | View details → |
varlockWill SmithSecure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration. |
UncategorizedVersion 1.0.0 | View details → |
uk-legal-pluginDeveloper not providedUK Legal Plugins for Claude Code
11 legal plugins built for UK jurisdiction — English & Welsh, Scottish, and Northern Irish law.
Plugin... |
UncategorizedVersion not provided | View details → |
shieldcodeNikolas de HorSecurity hardening and production-grade error handling expertise for Claude Code. Prevents OWASP Top 10 vulnerabilities (SQL injection, X... |
UncategorizedVersion 1.0.0 | View details → |
shieldALASTecnologySecurity orchestrator — autonomous pentests, SAST, secrets scanning, dependency audits, and outdated checks from your code editor CLI. Wr... |
UncategorizedVersion 0.3.1 | View details → |
security-sweeponomeajComprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command inje... |
UncategorizedVersion 1.0.0 | View details → |
public-repo-readinessdlewis7444Audits a codebase for secrets, PII, internal infrastructure references, and licensing issues before open-sourcing. Produces a remediation... |
UncategorizedVersion not provided | View details → |
product-review-expertYuSec2021product-review-expert is a Claude Code plugin for structured product and UX review. It is intended to help users analyze product requirem... |
UncategorizedVersion 1.1.0 | View details → |
mistral-mcpDeveloper not providedExposes the full Mistral AI API surface to Claude Code through a local MCP server: 22 tools (chat, streaming, embeddings, OCR, vision, Vo... |
UncategorizedVersion not provided | View details → |
membaseAristo IntelligenceMembase connects Claude Code to Membase Cloud, giving Claude persistent memory and wiki workflows across coding sessions. It can recall r... |
UncategorizedVersion 0.2.0 | View details → |
kube-dcShalbKube-DC is a Kubernetes-native data center platform. This plugin provides 11 workflow skills for managing the full platform lifecycle — c... |
UncategorizedVersion 1.1.0 | View details → |
env-guardianDeveloper not providedScan your codebase for exposed secrets and API keys, generate .env templates from environment variable usage, validate .env files against... |
UncategorizedVersion not provided | View details → |
dotsecenvdotsecenvManage GPG-encrypted environment secrets from Claude Code - a secure alternative to plaintext .env files. Store, retrieve, share, and rev... |
UncategorizedVersion 0.8.1 | View details → |
devrunwayyamaniModular SDLC plugin for any tech stack. Run /setup to declare your tools (frontend, backend, DB, auth, CI, etc.), and devrunway installs ... |
UncategorizedVersion 4.0.5 | View details → |
defangDefangLabsDeploy any Docker Compose app to your own cloud account on AWS or GCP in minutes. The `/defang:deploy` skill guides you through the full ... |
UncategorizedVersion 1.0.0 | View details → |
cplnControl PlaneDeploy and manage workloads on Control Plane — the AI-native virtual cloud spanning AWS, GCP, Azure, OCI, and bare metal under one API. S... |
UncategorizedVersion 2.2.3 | View details → |
conductorConductor OSSTeach Claude to orchestrate microservices and business processes with Conductor. This skill adds full workflow lifecycle management: defi... |
UncategorizedVersion 1.6.6 | View details → |
claude-security-linterPlugin AuthorA pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval() usa... |
UncategorizedVersion 1.0.0 | View details → |
claude-harnessChachamaruAutonomous Plan → Work → Review cycle for Claude Code. Go-native engine with 25× faster hooks, runtime guardrails on .git/ / secrets / de... |
UncategorizedVersion 5.6.0 | View details → |
backend-security-skillsMarcus SouzaSecurity auditor for Node.js and Python backend APIs. Four skills cover pre-audit reconnaissance (route graph, auth matrix, invariants), ... |
UncategorizedVersion 0.2.2 | View details → |
arn-infraDeveloper not providedInfrastructure and deployment for Claude Code — containerization, IaC generation (OpenTofu/Pulumi/CDK), CI/CD pipelines, environments, se... |
UncategorizedVersion not provided | View details → |
agentic-securityRoss YoungAgentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection,... |
UncategorizedVersion 0.136.3 | View details → |
agent4sscala-digestScala code intelligence for AI coding agents. 35 commands — search,
jump-to-definition, find references, call-graph, dead code detection,... |
UncategorizedVersion 0.5.0 | View details → |
agent-knowledgekeshrathCross-session memory for AI coding agents. A git-synced Markdown knowledge base with hybrid semantic + TF-IDF search, typed knowledge gra... |
UncategorizedVersion 1.9.3 | View details → |
agent-discoverkeshrathMCP server registry and on-demand proxy for AI coding agents. Browse the official MCP Registry, install/activate/deactivate servers from ... |
UncategorizedVersion 1.3.7 | View details → |
autofix-botDeepSource CorpCode review agent detecting vulnerabilities, quality issues, secrets. 5,000+ analyzers for CVEs. |
UncategorizedVersion not provided | View details → |
aws-data-analyticsAmazon Web ServicesData lake, analytics, and ETL workflows with S3 Tables, AWS Glue, and Athena. |
DevelopmentVersion 1.3.0 | View details → |
sonarqubeSonarSourceAutomatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, an... |
SecurityVersion 2.6.0 | View details → |
Aikido SecurityAikido SecurityAikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server. |
UncategorizedVersion 1.2.11 | View details → |
Security GuidanceAnthropicSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit review... |
SecurityVersion 2.0.18 | View details → |
Sources and coverage
Last checked: Nov 7, 2026 · 12:00 UTC. Refreshed every 6 hours.
We collect the Claude Marketplace and Anthropic-hosted catalogs:
Matching repository entries are combined; unrelated plugins with the same name stay separate. Source labels do not imply an Anthropic verification badge. Reported installs are source-reported counts, not independently verified users or revenue. Missing counts mean unknown.
We archive listing and manifest snapshots. Linked plugin code is not downloaded or executed.
Catalog results: live query. Your account and Follow status are live.