OWASP-aligned security checklist skill from everything-claude-code — scans code for injection flaws, auth issues, sensitive data exposure, and misconfigured dependencies.
Vulnerability analysis and secure coding enforcement agent from everything-claude-code — OWASP top 10 scans, dependency audits, and remediation recommendations.
securityvulnerabilityowasp
Agents
ECC Code Reviewer
Quality, security, and style code review agent from everything-claude-code — enforces team conventions, catches anti-patterns, and produces structured review comments.
code-reviewqualitystyle
Agents
Awesome Claude Code Subagents
VoltAgent's curated collection of Claude Code subagent definitions — specialized roles for QA, security, DevOps, architecture review, and code generation.
subagentsrolesqa
Skills
Trail of Bits Skills
Security-focused Claude Code skills from Trail of Bits — secure coding practices, audit checklists, threat modeling templates, and cryptography guidance.
securityauditthreat-modeling
IDE Plugins
Claude Code Security Review Action
Official Anthropic GitHub Action for automated security review — Claude scans every PR for vulnerabilities, secrets exposure, and OWASP top 10 issues.
securitygithub-actionsvulnerability-scanning
Hooks
Claude Code Hooks Mastery
A tutorial-style hooks repository with progressive examples from basic to advanced — includes patterns for security gates, auto-formatters, and CI integrations.
hookstutorialpatterns
Configs
Trail of Bits Claude Config
Security-hardened CLAUDE.md configuration from Trail of Bits — enforces secure coding practices, rejects dangerous patterns, and adds security-review prompts.
securitysecure-codingtrailofbits
MCP Servers
OpenClaw
Secure, sandboxed Claude Code integration by Composio — connects Claude Code to 250+ external tools and APIs with enterprise-grade permission controls.
mcpintegrationssecurity
Plugins
ClaudeBox
RchGrav's sandboxed Docker environment for Claude Code — isolated containers per project with configurable resource limits, volume mounts, and network policies.
dockersandboxisolation
Skills
karanb192 Claude Skills
A practical collection of Claude Code skills focused on real-world dev workflows — PR reviews, dependency analysis, security audits, and architecture diagrams.
pr-reviewsecurityarchitecture
MCP Servers
E2B Code Sandbox MCP
Official E2B MCP server — execute arbitrary code in secure cloud sandboxes, run scripts in isolated environments, and get output back in Claude without local execution risks.
e2bsandboxcode-execution
Mods
Secret Redactor
Automatically redacts API keys, credentials, IP addresses, and emails from terminal outputs and tool arguments before sending to the model.
securityprivacyredaction
Agents
Vizra Claude Code Agents
vizra-ai's enterprise agent templates — compliance checker, performance analyst, security auditor, and architecture reviewer with structured output formats.