vun-skill-pack
Pre-launch security gate: secrets scan, attack-surface mapping, data-flow tracing, vuln scanning, guided fixes, launch triage, plus an appsec agent and footgun guides for…
Lot de plugins · par coldtatooine · plus référencé
Aperçu
vun-skill-pack est un lot de plugins pour les outils de code IA publié par coldtatooine. Aucune place de marché que nous lisons ne le référence plus ; la dernière fiche a disparu le 2026-10-16. Le dernier changement enregistré date du 2026-10-16. Selon notre passage sur les places de marché du 2026-10-15.
Pre-launch security gate: secrets scan, attack-surface mapping, data-flow tracing, vuln scanning, guided fixes, launch triage, plus an appsec agent and footgun guides for Next.js/Vercel, Supabase, Stripe, Node/Express. Defensive review only.
Ce qu'il demande
- S'installe comme lot de plugins
- Hooks : 1
Ce qu'il déclare, demande et exécute, en détail
N’installez que des plugins de développeurs en qui vous avez confiance. Nous reprenons ce que publient les places de marché et ne testons pas les plugins.
Connecter
Pas de données pour une commande automatique : ce que déclarent ses places de marché ne dit pas sans ambiguïté comment le connecter.
Où il est publié
| Place de marché | Statut | Version | Chiffres | Vérifié | Vu pour la première fois |
|---|---|---|---|---|---|
| Place de marché communautaire coldtatooine/vuln-skill-pack (Ouvrir la source sur GitHub) | Retiré le 2026-10-16 | 1.2.0 | Forks (GitHub): 0 Étoiles (GitHub): 2 |
Non marqué |
Chaque chiffre est celui de la place de marché et n'est jamais additionné entre places de marché. Une place de marché qui ne publie pas de chiffre n'en affiche aucun : pas de nombre ne veut pas dire zéro.
Ce que contient le lot
Tel que publié sur Community GitHub marketplaces.
Skills: 5
nextjs-vercel-securitynode-express-securitypreflightstripe-securitysupabase-security
Commandes: 10
findingfixpreflightreconscansecretsthreat-modeltracetriagevuln
Agents: 1
security-reviewer
Hooks: 1
PreToolUse
Ce qui a changé
- N'est plus référencé sur Community GitHub marketplaces
- Community GitHub marketplaces: retiré
- Est devenu un produit que nous suivons
- Community GitHub marketplaces: apparu
Plugins similaires
Produits dont les noms, descriptions, outils et skills sont les plus proches de celui-ci par le sens, sur toutes les places de marché que nous lisons. La proximité n'est classée qu'à l'intérieur de cette liste.
-
Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection…
-
Security-focused development with advisory and vulnerability scanning (2 agents, 1 skill)
-
Integrated security for websites and apps: hardening, secure authentication (email verification, 2FA, passkeys), payment privacy, WAF defense agent with lockdown, 4-layer Fortress…
-
[STUB] Security audit, OWASP, authentication, compliance
-
Security best practices and vulnerability detection
-
Security audits, vulnerability scanning and secure coding.
-
Find and fix security issues in vibecoded apps. Scan a live URL or repo for TLS, headers, auth, secrets, IDOR/OAuth, and injection issues, then apply framework-aware fixes and…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
OWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
Plugins similaires par place de marché
La même question posée à chaque place de marché séparément : y a-t-il là un équivalent de ce plugin ?
Référencé sur Claude Code: claude-plugins-community (5)
-
Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Security orchestrator — autonomous pentests, SAST, secrets scanning, dependency audits, and outdated checks from your code editor CLI. Wraps Shannon pentester with Semgrep…
-
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button…
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Référencé sur Claude Code: claude-plugins-official (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
-
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the…
Référencé sur Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
Référencé sur Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Build web apps with frontend asset design, browser testing, UI components, payments, and database guidance.
Référencé sur Community GitHub marketplaces (5)
-
Security-focused development with advisory and vulnerability scanning (2 agents, 1 skill)
-
Integrated security for websites and apps: hardening, secure authentication (email verification, 2FA, passkeys), payment privacy, WAF defense agent with lockdown, 4-layer Fortress…
-
[STUB] Security audit, OWASP, authentication, compliance
-
Security best practices and vulnerability detection
-
Security audits, vulnerability scanning and secure coding.
Référencé sur Copilot CLI: github/awesome-copilot (5)
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.
-
Keep your coding agent up to date with the latest web best practices
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
Référencé sur Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
mobile-app
Build and deploy Power Apps code apps for mobile using Expo (React Native), with native device functionality and Power Platform connectors
Référencé sur Cursor: cursor/plugins (5)
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Skills for building on the Cursor Origin API. Fetch the live spec first, then follow the Origin rules for credentials, scopes, webhooks, paging, and errors. Includes a skill that…
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
-
Scaffold and validate new agent plugins.
Référencé sur Docker MCP Catalog (5)
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
next-devtools-mcp is a Model Context Protocol (MCP) server that provides Next.js development tools and utilities for AI coding assistants.
-
MCP server for using Semgrep to scan code for security vulnerabilities.
Référencé sur Official MCP Registry (5)
-
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
-
Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
-
Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.
-
MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.
-
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.
Trouvés par le sens, et non par un code ou un dépôt commun : les plugins similaires restent des produits distincts, et ceci n'est ni un avis ni une recommandation.
Vous voulez cette marque pour votre plugin dans notre catalogue ?
Prouvez que vous le maintenez avec un fichier dans son dépôt, un fichier sur votre domaine ou un enregistrement DNS, et vous pourrez afficher cette marque sur la fiche, avec des bannières à jour pour votre site et votre README. Comment se passe la vérification
Vous recevez aussi des alertes quand une marketplace le publie, le retire, change sa marque vérifiée ou ce qu'il demande, et son endpoint distant est surveillé comme un service web.
Données issues de Community GitHub marketplaces. Les chiffres proviennent de nos propres passages réguliers sur les places de marché, dernière lecture le . Nous ne publions aucune coordonnée des éditeurs de plugins.