Claude plugin directory
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 2,729 plugins across 15 categories.
Follow up to 3 plugins for free across Codex and Claude. Newest means first added to our catalog, not the publisher’s release date.
All plugins 23
1–23 of 23| Plugin / developer | Category | Follow |
|---|---|---|
vibeguardvibeguardSecurity auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypa... |
UncategorizedVersion 2.0.1 | View details → |
ultrashipHouseofmvpsAll-in-one builder toolkit for Claude Code. 22 automatic skills, 20 tools, 5 agents. Covers the full dev lifecycle — brainstorming, plann... |
UncategorizedVersion 2.13.2 | View details → |
shieldALASTecnologySecurity orchestrator — autonomous pentests, SAST, secrets scanning, dependency audits, and outdated checks from your code editor CLI. Wr... |
UncategorizedVersion 0.3.1 | View details → |
sentinel-kbDeveloper not providedSecurity vulnerability scanner backed by 2134 real findings extracted from 361 audit reports by 58 professional firms (Trail of Bits, Cur... |
UncategorizedVersion not provided | View details → |
security-sweeponomeajComprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command inje... |
UncategorizedVersion 1.0.0 | View details → |
rugproofRugproofSmart contract security auditor for Claude Code — vuln detection, exploit PoCs, mainnet-fork simulation, audit cards, on-chain certificat... |
UncategorizedVersion 1.0.1 | View details → |
opsera-devsecopsOpseraOpsera DevSecOps Agent — AI-powered architecture analysis, security scanning, compliance auditing, and SQL security for your codebase. Fr... |
UncategorizedVersion 1.0.0 | View details → |
npm-postinstall-attack-scanneraliksirDetect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios m... |
UncategorizedVersion 0.1.0 | View details → |
infynon-pkgDeveloper not providedUniversal package security manager — intercepts install commands across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, ... |
UncategorizedVersion not provided | View details → |
githitsGitHitsGitHits is the code context layer for Claude Code. It provides two capabilities: (1) Code navigation: indexed search, grep, and file read... |
UncategorizedVersion 0.8.0 | View details → |
dx-guardOnur ErkanDependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and ... |
UncategorizedVersion 1.0.0 | View details → |
docker-image-scanIgor KoricanacBuild a container image from a Dockerfile, scan it for security vulnerabilities with Trivy, and auto-clean up. Uses Docker or Podman. No ... |
UncategorizedVersion 1.1.0 | View details → |
cyber-punkbonciarelloAutomated security vulnerability scanner for Claude Code. Fetches CVE/CWE data from NIST NVD, scans code for vulnerable patterns across 9... |
UncategorizedVersion 1.0.0 | View details → |
claude-code-vulnerability-checkTimothée GarnaudDetect CVE (Common Vulnerability Exposure) in PHP / JS project.
Auto apply minor fixes and patch
Alert on necessity of major update (prev... |
UncategorizedVersion 1.0.1 | View details → |
bciQInnovateThe first BCI toolkit for researchers, developers, and security engineers. Threat modeling, vulnerability scoring, pattern detection, and... |
UncategorizedVersion 1.1.0 | View details → |
almanax-securityAlmanaxScan Git commits for security vulnerabilities using Almanax directly from Claude Code. The plugin connects to the Almanax MCP server to a... |
UncategorizedVersion 1.0.0 | View details → |
agent4sscala-digestScala code intelligence for AI coding agents. 35 commands — search,
jump-to-definition, find references, call-graph, dead code detection,... |
UncategorizedVersion 0.5.0 | View details → |
stackhawk-hawkscanStackHawkConfigure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, an... |
SecurityVersion 2.6.0 | View details → |
NightVisionNightVision EngineeringSkills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and RES... |
UncategorizedVersion 1.1.0 | View details → |
42crunch-api-security-testing42CrunchAutomate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWAS... |
SecurityVersion 1.5.5 | View details → |
Aikido SecurityAikido SecurityAikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server. |
UncategorizedVersion 1.2.11 | View details → |
claude-securityAnthropicDeep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding ch... |
SecurityVersion 0.12.0 | View details → |
Security GuidanceAnthropicSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit review... |
SecurityVersion 2.0.18 | View details → |
Sources and coverage
Last checked: Nov 7, 2026 · 12:00 UTC. Refreshed every 6 hours.
We collect the Claude Marketplace and Anthropic-hosted catalogs:
Matching repository entries are combined; unrelated plugins with the same name stay separate. Source labels do not imply an Anthropic verification badge. Reported installs are source-reported counts, not independently verified users or revenue. Missing counts mean unknown.
We archive listing and manifest snapshots. Linked plugin code is not downloaded or executed.
Catalog results: live query. Your account and Follow status are live.